CVE-2026-40129: Improper Control of Generation of Code

Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs to the application. If processed by the application, this input could be delivered to users subscribed to the channel and result ...

CVE-2020-6262

Service Data Download in SAP Application Server ABAP ST-PI, before versions 2008146C, 20081620, 20081640, 20081700, 20081710, 740 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application and the whole ABAP system...

PT-2020-19057

Name of the Vulnerable Software and Affected Versions SAP Application Server ABAP ST-PI versions prior to 2008 1 46C SAP Application Server ABAP ST-PI versions prior to 2008 1 620 SAP Application Server ABAP ST-PI versions prior to 2008 1 640 SAP Application Server ABAP ST-PI versions prior to 20...

CVE-2020-6262: Improper Control of Generation of Code

Service Data Download in SAP Application Server ABAP ST-PI, before versions 2008146C, 20081620, 20081640, 20081700, 20081710, 740 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application and the whole ABAP system...