CVE-2021-33671

SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...

PT-2021-20262 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL64NUC 7.21,...

PT-2021-20255 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 700, 702, 730, 731, 740, 750, 784 Description: The issue allows external exposure of functions, which can lead to information disclosure. Recommendations: For SAP NetWeaver ABAP Server and...

PT-2021-20256 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Reconciliation Framework versions 700 through 75F Description: A function module in the Reconciliation Framework of SAP NetWeaver AS ABAP allows a high-privileged attacker to inject code that can be executed by the...

SAP NetWeaver AS 安全漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS, which is caused by insufficient product login authentication. The following products and versions...

SAP NetWeaver AS 信息泄露漏洞

SAP NetWeaver AS is a SAP web application server from SAP, a German company. SAP NetWeaver AS JAVA has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information in HTTP requests...

SAP NetWeaver AS ABAP 缓冲区错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS ABAP and ABAP Platform, which stems from a memory corruption vulnerability in the product. KRNL64N...

SAP NetWeaver AS 安全漏洞

SAP NetWeaver AS is an SAP web application server from SAP, a German company. SAP NetWeaver AS for Java has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by sending multiple Http requests with different method types...

CVE-2021-27610

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by maliciou...

CVE-2021-27610

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by maliciou...

PT-2021-7873 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804 Description: The issue is related to improper authentication due to the inconsistent and undistinguished format of internal and...

SAP NetWeaver AS JAVA Information Disclosure (3023299)

SAP Netweaver Application Server Java versions 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allow an attacker to access restricted information by entering malicious server name via the UserAdmin application of the SAP NetWeaver application server. Note that Nessus has not tested for this issue but has...

SAP NetWeaver AS for JAVA has a code issue vulnerability

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. A code issue vulnerability exists in SAP NetWeaver AS for JAVA, which can be exploited by remote attackers to submit a special request that can bypass security restrictions and allow unauthorize...

SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability can be exploited by remote attackers to submit special requests, bypass security restrictions, and gain unauthorized...

SAP NetWeaver ABAP Server and ABAP Platform Memory Corruption Vulnerability (CNVD-2021-47715)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver ABAP Server and ABAP Platform, which stems from an inp...

SAP NetWeaver AS for ABAP Cross-Site Scripting Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS for ABAP, which can be exploited by an attacker ...

SAP NetWeaver AS JAVA Missing XML Validation (3053066)

SAP Netweaver Application Server Java versions 7.20, 7.30, 7.31, 7.40, and 7.50 allow an attacker authenticated as an administrator to connect over a network and submit a specially crafted XML file in the application because of missing XML Validation. This vulnerability enables an attacker to ful...

SAP NetWeaver AS ABAP Command Injection (June 2021)

A command injection vulnerability exists in SAP NetWeaver AS ABAP due to improperly restricting I/O buffering. An unauthenticated, remote attacker can exploit this, to insert cleartext commands into encrypted SMTP sessions over the network which can partially impact the integrity of the...

SAP NetWeaver Application Server Cross-Site Scripting Vulnerability

SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server, which can be exploited by an attacker to launch a cross-site scripting attack...

SAP NetWeaver AS for ABAP Memory Corruption Vulnerability (CNVD-2021-47706)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which originates from an input validation...