PT-2025-28299 · Sap · Sap Basis

Name of the Vulnerable Software and Affected Versions: SAP BASIS affected versions not specified Description: The issue is caused by a missing authorization check in an obsolete RFC enabled function module. This allows an authenticated low-privileged attacker to call a Remote Function Call RFC,...

PT-2025-28293 · Sap · Sap Netweaver Application Server Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server Java affected versions not specified Description: The issue concerns a component in SAP NetWeaver Application Server Java that handles outbound TLS connections. This component does not properly verify the...

SAP NetWeaver Application Server Java 安全漏洞

SAP NetWeaver Application Server Java is an application server from SAP Germany that provides a Java runtime environment. The product is primarily used for developing and running Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java that stems from...

PT-2025-28276 · Sap · Sap Netweaver System Configuration

Name of the Vulnerable Software and Affected Versions: SAP Netweaver System Configuration affected versions not specified Description: The issue results from a lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could completely compromise t...

SAP NetWeaver和SAP ABAP Platform 安全漏洞

SAP NetWeaver and SAP ABAP Platform are both products of SAP, a German company.SAP NetWeaver is an integrated service-oriented application platform. SAP NetWeaver is an integrated service-oriented application platform that provides a development and runtime environment for SAP applications.SAP AB...

SAP NetWeaver 安全漏洞

SAP NetWeaver is a set of integrated service-oriented application platforms from SAP, Germany. The platform primarily provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver, which stems from a lack of authorization checks and allows...

PT-2025-28275 · Sap · Sap Plug-In Basis +1

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse and SAP Plug-In Basis affected versions not specified Description: The issue allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. ...

PT-2025-28286 · Sap · Sap S/4Hana +1

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA and SAP SCM versions S4CORE 102-108 Description: SAP S/4HANA and SAP SCM Characteristic Propagation contains a remote code execution issue. An attacker with user-level or high privileges can create a new report containing maliciou...

PT-2025-28279 · Sap · Sap Business Warehouse +1

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse and SAP BW/4HANA BEx Tools affected versions not specified Description: The issue allows an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could...

SAP NetWeaver 代码问题漏洞

SAP NetWeaver is a set of integrated service-oriented application platform from SAP. The platform primarily provides a development and runtime environment for SAP applications. A code issue vulnerability exists in SAP NetWeaver that stems from insecure Java deserialization and could lead to high...

PT-2025-28288 · Sap · Sap Netweaver Application Server Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description: The issue allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. When a victim clicks on this crafte...

PT-2025-28277 · Sap · Sap Netweaver Business Warehouse

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Business Warehouse CCAW affected versions not specified Description: The issue allows a privileged attacker to cause a high CPU load by executing RFC enabled function modules without any input parameters. This results in reduced...

PT-2025-28297 · Sap · Sap Businessobjects Content Administrator Workbench

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Content Administrator Workbench affected versions not specified Description: The issue is due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, allowing attackers to craft malicious...

PT-2025-28287 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: The issue allows an authenticated non-administrative user to call a remote-enabled function module, potentially granting access to non-sensitive information about the SAP system and O...

SAP NetWeaver 安全漏洞

SAP NetWeaver is a set of integrated service-oriented application platforms from SAP, Germany. The platform primarily provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver that originates from an authenticated, non-administrative use...

PT-2025-28284 · Sap · Sap Cmc Promotion Management

Name of the Vulnerable Software and Affected Versions: SAP CMC Promotion Management affected versions not specified Description: The issue allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analyzing response...

PT-2025-28285 · Sap · Sap Netweaver Xml Data Archiving Service

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver XML Data Archiving Service affected versions not specified Description: The issue allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially...

PT-2025-28353 · Sap · Sap Netweaver Application Server Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description: The issue allows an unauthenticated attacker to create a malicious link that can be made publicly available. When an authenticated victim...

SAP NetWeaver Application Server ABAP和SAP ABAP Platform 跨站脚本漏洞

SAP ABAP Platform and SAP NetWeaver Application Server ABAP are both products of SAP, Germany.SAP ABAP Platform is an ABAP-based SAP solution.SAP NetWeaver Application Server SAP NetWeaver Application Server ABAP is a platform for running and developing applications based on the ABAP language. A...

PT-2025-28283 · Sap · Sap Netweaver Enterprise Portal Administration

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Enterprise Portal Administration affected versions not specified Description: The issue arises when a privileged user uploads untrusted or malicious content. Upon deserialization, this content could compromise the confidentialit...