Lucene search
+L

4618 matches found

RedhatCVE
RedhatCVE
added 2025/10/15 12:51 a.m.8 views

CVE-2025-42902

Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it h...

5.3CVSS6.9AI score0.00361EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/14 1:15 a.m.6 views

CVE-2025-42908

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

5.4CVSS0.00146EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/14 12:18 a.m.15 views

CVE-2025-42908 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

5.4CVSS0.00146EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/14 12:18 a.m.7 views

EUVD-2025-34122

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

5.4CVSS6.3AI score0.00146EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/14 12:18 a.m.3 views

CVE-2025-42908 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

5.4CVSS6.4AI score0.00146EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/14 12:18 a.m.13 views

CVE-2025-42908

CVE-2025-42908 describes a CSRF vulnerability in SAP NetWeaver Application Server for ABAP where an authenticated attacker can initiate transactions via the session manager, bypassing the initial transaction screen and authorization check, potentially enabling actions that normally require specif...

5.4CVSS6.4AI score0.00146EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/14 12:17 a.m.4 views

CVE-2025-42902 Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform

Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it h...

5.3CVSS6.5AI score0.00361EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/14 12:17 a.m.21 views

CVE-2025-42902

The CVE-2025-42902 issue affects SAP NetWeaver AS ABAP and ABAP Platform. A memory corruption flaw allows an unauthenticated attacker to send a corrupted SAP Logon Ticket or SAP Assertion Ticket, causing a NULL pointer dereference and crashing the SAP work process. This yields impact on availabil...

5.3CVSS6.5AI score0.00361EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/14 12:17 a.m.15 views

CVE-2025-42902 Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform

Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it h...

5.3CVSS0.00361EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/14 12:17 a.m.10 views

EUVD-2025-34125

Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it h...

5.3CVSS6.4AI score0.00361EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.7 views

PT-2025-41840

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description A Cross-Site Request Forgery CSRF issue exists in SAP NetWeaver Application Server for ABAP. An authenticated attacker may be able to initiate transactions...

5.4CVSS6.3AI score0.00146EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.8 views

SAP NetWeaver AS ABAP Business Server和SAP ABAP Platform 代码问题漏洞

SAP NetWeaver AS ABAP Business Server and SAP ABAP Platform are both products of SAP, Germany.SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming.SAP SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced...

5.3CVSS6.7AI score0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

SAP NetWeaver Application Server for ABAP 跨站请求伪造漏洞

SAP NetWeaver Application Server for ABAP is a core application server platform from SAP, Germany. A cross-site request forgery vulnerability exists in SAP NetWeaver Application Server for ABAP, which stems from a cross-site request forgery vulnerability that could lead to bypassing authorization...

5.4CVSS6.5AI score0.00146EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-27516

Malware in sbrugna...

7.6CVSS7.2AI score0.01075EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2009-2920

Malware in sbrugna...

4.3CVSS6.4AI score0.02059EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-20355

Malware in sbrugna...

7.5CVSS6.8AI score0.02546EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-20368

Malware in sbrugna...

6.9CVSS6.9AI score0.00638EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-14358

Malware in sbrugna...

7.4CVSS7.4AI score0.00552EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-20342

Malware in sbrugna...

5.4CVSS6AI score0.00473EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-27390

Malware in sbrugna...

7.5CVSS5.7AI score0.01386EPSS
SaveExploits0References3
Rows per page
Query Builder