4618 matches found
PT-2025-36563
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: A missing authentication check in the SAP NetWeaver application on IBM i-series allows unauthorized users with high privileges to read, modify, or delete sensitive information, and...
PT-2025-36544
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: SAP NetWeaver Service Data Download allows an authenticated user to call a remote-enabled function module, potentially granting access to information about the SAP system and operatin...
PT-2025-36556
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server Java affected versions not specified Description: SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application...
PT-2025-36557
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java application versions affected versions not specified Description: The SAP NetWeaver AS Java application utilizes Adobe Document Service, which includes a vulnerable version of OpenSSL. Exploitation of known vulnerabiliti...
PT-2025-36555
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS JAVA IIOP service affected versions not specified Description: The SAP NetWeaver AS JAVA IIOP service lacks randomness in assigning Object Identifiers. An authenticated attacker with low privileges could predict these...
SAP NetWeaver AS Java 安全漏洞
SAP NetWeaver AS Java is a platform system from SAP, a German company. A security vulnerability exists in SAP NetWeaver AS Java that stems from the use of a vulnerable version of OpenSSL and could lead to accessing and modifying system information...
SAP NetWeaver ABAP Platform 跨站脚本漏洞
SAP NetWeaver ABAP Platform is an all-in-one technology platform from SAP. SAP NetWeaver ABAP Platform suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execu...
SAP NetWeaver 代码问题漏洞
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A deserialization vulnerability exists in SAP NetWeaver, which arises from unsafe deserialization of...
PT-2025-36562
SAP NetWeaver and Affected Versions SAP NetWeaver versions 5.3 through 10.0 SAP NetWeaver AS Java affected versions not specified Description SAP NetWeaver contains a critical deserialization flaw in the RMI-P4 module. This allows an unauthenticated attacker to execute arbitrary operating system...
SAP NetWeaver Application Server 安全漏洞
SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability in SAP NetWeaver Application Server can be exploited by an attacker to potentially cause sensitive information to be read, modified, or deleted...
SAP NetWeaver AS Java 代码注入漏洞
SAP NetWeaver AS Java is a platform system from SAP, a German company. A code injection vulnerability exists in SAP NetWeaver AS Java that originates from allowing the uploading of arbitrary files, which could lead to full control of the system...
SAP NetWeaver Application Server Java 访问控制错误漏洞
SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. An Access Control Error vulnerability exists in SAP NetWeaver Application Server Java, which stems...
SAP NetWeaver Application Server ABAP 安全漏洞
SAP NetWeaver Application Server ABAP is a platform for running and developing applications based on the ABAP language from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server ABAP that originates from allowing unauthorized read access, which could lead to informatio...
PT-2025-36553
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java affected versions not specified Description: SAP NetWeaver AS Java contains a flaw in an available service that allows an authenticated, non-administrative attacker to upload an arbitrary file. Execution of this file can...
SAP NetWeaver AS Java 安全漏洞
SAP NetWeaver AS Java is a platform system from SAP, a German company. A security vulnerability exists in SAP NetWeaver AS Java that stems from a lack of randomness and could lead to predictive identifiers...
Vulnerabilities fixed in SAP products
SAP has fixed vulnerabilities in several products, including in SAP NetWeaver Application Server ABAP, SAP S/4HANA, SAP Landscape Transformation and AP Cloud Connector. The vulnerabilities include circumvention of authorization controls, Cross-Site Scripting XSS and a Directory Traversal...
SAP NetWeaver AS ABAP Privileges Escalation (3623440)
The remote SAP NetWeaver ABAP server is affected by priviliege escalation. vulnerability as referenced in the 3623440 advisory. - SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. CVE-2025-42953 Not...
The Bug Report – August 2025 Edition
The Bug Report – August 2025 Edition By Jonathan Omakun, Tola Olawale · August 27, 2025 Why am I here? Welcome back to The Bug Report! Did you miss us? The Trellix Advanced Research Center has been playing a high-stakes game of whack-a-mole with this month's vulnerabilities. We've dug through all...
Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution
A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft. The exploit in question chains together CVE-2025-31324 and CVE-2025-42999 to bypass authentication and achieve remote code...