Lucene search
+L

3345 matches found

CNNVD
CNNVD
added 2021/06/08 12:00 a.m.9 views

SAP Netweaver 代码问题漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which originates from an input validation...

7.5CVSS5.7AI score0.01508EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/06/08 12:00 a.m.11 views

SAP NetWeaver ABAP Server 和 ABAP Platform 授权问题漏洞

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability can be exploited by remote attackers to submit special requests, bypass security restrictions, and gain unauthorized...

9.8CVSS5.6AI score0.0132EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/06/08 12:00 a.m.11 views

SAP Netweaver 代码问题漏洞

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. A code issue vulnerability exists in SAP NetWeaver AS for JAVA, which can be exploited by remote attackers to submit a special request that can bypass security restrictions and allow unauthorize...

9CVSS5.8AI score0.01594EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/06/08 12:00 a.m.12 views

SAP Netweaver 缓冲区错误漏洞

SAP Netweaver is a service oriented, integrated application platform from SAP Germany that provides a development and runtime environment for SAP applications. The platform provides a development and runtime environment for SAP applications.SAP NetWeaver suffers from an input validation error...

7.5CVSS6.1AI score0.01508EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/06/08 12:00 a.m.11 views

SAP Netweaver 缓冲区错误漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which stems from an input validation erro...

7.5CVSS5.7AI score0.01508EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2021/05/21 12:00 a.m.43 views

SAP NetWeaver AS ABAP Command Injection (May 2021)

A command injection vulnerability exists in SAP NetWeaver Application Server ABAP due to a flaw in the RDDPUTJR program. An authenticated, local attacker can exploit this, by executing an ABAP report when the attacker has access to the local SAP system, to execute arbitrary command or create a...

8.2CVSS7.5AI score0.0027EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/05/12 12:00 a.m.49 views

SAP NetWeaver AS ABAP Code Injection Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code injection vulnerability exists in SAP NetWeaver AS ABAP versions 700, 701, 702, 730, and 731. An attacker...

8.2CVSS7.2AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/11 3:15 p.m.39 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS0.0027EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/11 3:15 p.m.5 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

6.7CVSS5.9AI score0.0027EPSS
SaveExploits0References2
Prion
Prion
added 2021/05/11 3:15 p.m.20 views

Denial of service

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

4.6CVSS6.4AI score0.0027EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/05/11 2:19 p.m.58 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS6.5AI score0.0027EPSS
SaveExploits0References2
NCSC
NCSC
added 2021/05/11 12:00 a.m.9 views

Vulnerability fixed in SAP NetWeaver

A vulnerability has been fixed in SAP NetWeaver. The vulnerability allows a malicious party to remotely execute arbitrary code execute. As usual, SAP is making few details publicly available. SAP has released updates to fix the vulnerabilities. More information can be found at:...

8.2CVSS6.9AI score0.0027EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/05/11 12:00 a.m.15 views

PT-2021-17546 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 700, 701, 702, 730, 731 Description: The issue allows a high-privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. This could lead to...

8.2CVSS7.1AI score0.0027EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/04/30 12:00 a.m.22 views

SAP NetWeaver Master Data Management Information Disclosure Vulnerability (CNVD-2021-36683)

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. An information disclosure vulnerability exists in SAP NetWeaver Master Data Management 710, 710.750, which can be exploited by an attacker to gain access to highly sensitive da...

8.3CVSS6.5AI score0.00422EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.9 views

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform allows a perpetrator to gain access, modify, or make existing files inaccessible.

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform is related to the absence of restrictions on file loading. Exploiting this vulnerability allows a malicious actor to remotely gain access, modify, or make existing files inaccessible using a...

7.5CVSS6.9AI score0.00934EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.10 views

The vulnerability of the ENGINEAPI component of the SAP NetWeaver Java Application Server web application server allows a attacker to cause a service failure.

The vulnerability of the ENGINEAPI component in SAP NetWeaver Java Application Server web applications is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.2AI score0.018EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/04/19 12:00 a.m.17 views

SAP Netweaver Information Disclosure Vulnerability (CNVD-2021-31951)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. There is a security vulnerability in SAP, and no details of the vulnerability are provided at this time...

6.5CVSS6.9AI score0.00809EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:00 a.m.26 views

SAP NetWeaver AS ABAP Denial of Service Vulnerability (CNVD-2021-29099)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP NetWeaver AS ABAP versions 731, 740, and 750. The vulnerability...

6.5CVSS6.7AI score0.00862EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:00 a.m.9 views

SAP NetWeaver AS JAVA Content Spoofing Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A content spoofing vulnerability exists in SAP NetWeaver Application Server for Java versions 7.10, 7.11, 7.20,...

4.3CVSS6.6AI score0.00561EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:00 a.m.47 views

SAP NetWeaver AS JAVA cross-site scripting vulnerability (CNVD-2021-29100)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS JAVA versions 7.10 and 7.11. An attacker can...

5.4CVSS6AI score0.00473EPSS
SaveExploits0References1
Rows per page
Query Builder