4203 matches found
PT-2025-46224
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description The Migration Workbench DX Workbench component does not initiate a malware scan when files are uploaded to the application server by a user with administrati...
PT-2025-46238
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java affected versions not specified Description An information disclosure issue exists in SAP NetWeaver Application Server Java. An unauthenticated attacker can access internal metadata files through crafted...
CVE-2025-42882: Missing Authorization
Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAP to retrieve restricted technical information from the system. This disclosure of environment details of the system...
SAP NetWeaver AS Java Insecure Deserialization (October 2025)
The version of SAP NetWeaver Application Server for Java detected on the remote host is affected by an insecure deserialization vulnerability as disclosed in the SAP Security Patch Day October 2025: - Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could explo...
CVE-2025-42902
Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it h...
SAP NetWeaver Application Server ABAP Platform Authentication Bypass
The vulnerability of SAP NetWeaver Application Server ABAP and ABAP Platform software integration platforms is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information...
SAP NetWeaver Application Server ABAP Functional Module Data Compromise
The vulnerability of the functional module of the RFC interface in SAP NetWeaver Application Server ABAP and ABAP Platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the protected information...
CVE-2025-42908
Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...
CVE-2025-42908 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP
Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...
CVE-2025-42908
CVE-2025-42908 describes a CSRF vulnerability in SAP NetWeaver Application Server for ABAP where an authenticated attacker can initiate transactions via the session manager, bypassing the initial transaction screen and authorization check, potentially enabling actions that normally require specif...
EUVD-2025-34122
Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...
CVE-2025-42908 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP
Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...
CVE-2025-42902
The CVE-2025-42902 issue affects SAP NetWeaver AS ABAP and ABAP Platform. A memory corruption flaw allows an unauthenticated attacker to send a corrupted SAP Logon Ticket or SAP Assertion Ticket, causing a NULL pointer dereference and crashing the SAP work process. This yields impact on availabil...
CVE-2025-42908: Cross-Site Request Forgery (CSRF)
Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...
SAP NetWeaver AS ABAP Business Server and SAP ABAP Platform code-related vulnerabilities
SAP NetWeaver AS ABAP Business Server and SAP ABAP Platform are both products of SAP, Germany.SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming.SAP SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced...
CVE-2025-42902: NULL Pointer Dereference
Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it h...
PT-2025-41840
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description A Cross-Site Request Forgery CSRF issue exists in SAP NetWeaver Application Server for ABAP. An authenticated attacker may be able to initiate transactions...
EUVD-2014-3149
Malware in sbrugna...