The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the SAP NetWeaver software integration platform, related to uncontrolled resource consumption, allows a perpetrator to cause service interruptions.

The vulnerability of the SAP NetWeaver software integration platform is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform lies in the redirection of the URL during page loading, causing it to go to an unreliable website. This allows attackers to disclose sensitive information that should be protected.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform lies in the redirection of the URL to an unreliable website when loading the login page. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

The vulnerability of SAP NetWeaver web application servers’ Internet Communication Manager and SAP Web Dispatcher, related to deficiencies in the mechanism for assigning internal resource access levels for debugging purposes, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the SAP NetWeaver Internet Communication Manager and SAP Web Dispatcher web applications is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging purposes. Exploiting this vulnerability can allow attackers to compromise the...

The vulnerability of the SAP NetWeaver ABAP software integration platform lies in the insufficient protection of the web page structure, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to insufficient protection of the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of SAP NetWeaver web application servers, such as the SAP NetWeaver Internet Communication Manager and the SAP Content Server, as well as the SAP Web Dispatcher, relates to the issue of writing beyond the buffer boundaries, allowing attackers to compromise the accessibility of protected information.

The vulnerability of SAP NetWeaver web application servers, such as the SAP NetWeaver Internet Communication Manager and the SAP Content Server, as well as the SAP Web Dispatcher, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the SAP NetWeaver ABAP software integration platform, related to the lack of authentication, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of SAP NetWeaver Internet Communication Framework web applications lies in the lack of authentication for critical functions, allowing attackers to circumvent existing security restrictions.

The vulnerability of SAP NetWeaver Internet Communication Framework web applications lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the lack of measures taken to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to incorrect privilege assignment, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Service Data Control Center (SDCCN) tool in SAP NetWeaver and ABAP Platform software integration platforms allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Service Data Control Center SDCCN tool in SAP NetWeaver and ABAP Platform software integration platforms is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to...

The vulnerability of the SAP NetWeaver AS ABAP software integration platform lies in the lack of password masking for fields, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver AS ABAP software integration platform is related to the absence of password field masking. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the SAP NetWeaver Enterprise Portal (SAP NW EP) software integration platform lies in the insufficient protection of operational data during code debugging, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform SAP NW EP is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Vulnerabilities fixed in SAP Software

SAP has fixed multiple vulnerabilities in several products, including SAP Solution Manager, SAP jConnect, SAP Web Dispatcher, SAP NetWeaver, SAP S/4 HANA Private Cloud, and SAP BusinessObjects. The vulnerabilities include code injection, deserialization, and insufficient input validation, which c...

SAP NetWeaver AS Missing Authentication (December 2025)

The version of SAP NetWeaver Application Server detected on the remote host is affected by a missing authentication vulnerability as disclosed in the SAP Security Patch Day December 2025: - The SAP Internet Communication Framework does not conduct any authentication checks for features that need...

SAP NetWeaver AS Java DoS (December 2025)

The version of SAP NetWeaver Application Server for Java detected on the remote host is affected by a denial of service vulnerability as disclosed in the SAP Security Patch Day December 2025: - SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to...

CVE-2025-42874

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

CVE-2025-42872

Due to a Cross-Site Scripting XSS vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result...

EUVD-2025-201855

Due to a Cross-Site Scripting XSS vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result...