SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

CVE-2021-33691

NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability.SAP NetWeaver Development Infrastructure Notification Service allows a threat actor to send crafted scripts to a victim. If the victim ha...

Cross site scripting

NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability.SAP NetWeaver Development Infrastructure Notification Service allows a threat actor to send crafted scripts to a victim. If the victim ha...

CVE-2021-33691

The CVE-2021-33691 issue affects SAP NetWeaver Development Infrastructure (NWDI) Notification Service, specifically versions 7.31, 7.40, and 7.50. The root cause is insufficient encoding of user-supplied inputs, which enables Cross-Site Scripting (XSS). A threat actor could send crafted scripts t...

CVE-2021-33691: Improper Neutralization of Input During Web Page Generation

NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability.SAP NetWeaver Development Infrastructure Notification Service allows a threat actor to send crafted scripts to a victim. If the victim ha...

PT-2021-20268

Name of the Vulnerable Software and Affected Versions: NWDI Notification Service versions 7.31, 7.40, 7.50 Description: The issue arises from insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability. This allows a threat actor to send crafted scripts ...

Unrestricted file upload

Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure NWDI allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors...

CVE-2013-6820: Undefined Security Weakness

Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure NWDI allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors...

PT-2013-6130

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Development Infrastructure NWDI affected versions not specified Description The issue concerns an unrestricted file upload vulnerability. This allows remote attackers to execute arbitrary code by uploading a file with an executab...