Denial of service

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

CVE-2021-27611

CVE-2021-27611 affects SAP NetWeaver AS ABAP versions 700, 701, 702, 730, 731. The vulnerability enables a high-privileged, local attacker to inject malicious code by executing an ABAP report on a local SAP system, with potential data access/overwrite and denial of service. Root cause cited acros...

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

PT-2021-17546 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 700, 701, 702, 730, 731 Description: The issue allows a high-privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. This could lead to...

SAP NetWeaver AS ABAP Business Server code injection vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code injection vulnerability exists in SAP NetWeaver AS ABAP versions 700, 701, 702, 730, and 731. An attacker...

Vulnerability fixed in SAP NetWeaver

A vulnerability has been fixed in SAP NetWeaver. The vulnerability allows a malicious party to remotely execute arbitrary code execute. As usual, SAP is making few details publicly available. SAP has released updates to fix the vulnerabilities. More information can be found at:...

CVE-2021-27611: Improper Control of Generation of Code

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

SAP NetWeaver Master Data Management Information Disclosure Vulnerability (CNVD-2021-36683)

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. An information disclosure vulnerability exists in SAP NetWeaver Master Data Management 710, 710.750, which can be exploited by an attacker to gain access to highly sensitive da...

SAP NetWeaver Java Application Server ENGINEAPI DoS

The vulnerability of the ENGINEAPI component in SAP NetWeaver Java Application Server web applications is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

SAP NetWeaver Knowledge Management Access Modification Inaccessible

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform is related to the absence of restrictions on file loading. Exploiting this vulnerability allows a malicious actor to remotely gain access, modify, or make existing files inaccessible using a...

ABAP Server Arbitrary Code Injection

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

SAP NetWeaver Java Application Server Auth Bypass

The vulnerability of the SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

SAP Netweaver Information Disclosure Vulnerability (CNVD-2021-31951)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. There is a security vulnerability in SAP, and no details of the vulnerability are provided at this time...

SAP NetWeaver AS JAVA cross-site scripting vulnerability (CNVD-2021-29100)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS JAVA versions 7.10 and 7.11. An attacker can...

SAP NetWeaver AS JAVA Content Spoofing Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A content spoofing vulnerability exists in SAP NetWeaver Application Server for Java versions 7.10, 7.11, 7.20,...

SAP NetWeaver Application Server for Java Information Disclosure Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server for Java versions 7.30, 7.31,...

SAP NetWeaver AS ABAP Denial of Service Vulnerability (CNVD-2021-29099)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP NetWeaver AS ABAP versions 731, 740, and 750. The vulnerability...

SAP NetWeaver Application Server for Java Access Control Error Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integration of the application platform, the platform mainly for SAP applications to provide a development environment. The platform mainly for SAP applications to provide a development and runtime environment.SAP NetWeaver...

SAP NetWeaver AS Java and AS ABAP Multiple Vulnerabilities (Apr 2021)

The version of SAP Netweaver Application Server for Java installed on the remote host may be affected by multiple vulnerabilities, including the following: - An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java...

CVE-2021-27599

SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Integration Builder Framework, versions - 7.10, 7.30, 7.31, 7.40, 7.50, allows an attacker to access information under certain conditions, which would otherwise be restricted...