CVE-2019-0321

CVE-2019-0321 affects SAP ABAP Platform / SAP Basis (versions 7.31, 7.4, 7.5). The vulnerability arises from insufficient encoding of user-controlled inputs, leading to a Cross‑Site Scripting (XSS) issue. The connected PT-2019-4588 entry corroborates the issue and describes the affected versions ...

CVE-2022-22543

CVE-2022-22543 affects SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) across multiple versions (KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 8.04, KRNL64UC/NUC variants, etc.). The root cause is insufficient validation of sap-passport information, enabling...

CVE-2022-27668

CVE-2022-27668 describes an improper access control in SAProuter related to the saprouttab route-permission configuration. An unauthenticated remote attacker can issue SAProuter administration commands, potentially stopping SAProuter and severely impacting availability. Affected components/versio...

CVE-2024-27902

CVE-2024-27902 affects SAP NetWeaver AS ABAP with SAP GUI for HTML, specifically versions 7.89 and 7.93. The root cause is insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting (XSS) vulnerability. Exploitation can allow a remote attacker to execute code in a user’s b...

CVE-2019-0257

The CVE affects SAP NetWeaver AS ABAP Platform. The issue is in the customization functionality that does not perform necessary authorization checks for an authenticated user, enabling escalation of privileges. Affected versions include: 7.0–7.02; 7.10–7.11; 7.30; 7.31; 7.40; 7.50–7.53; and 7.74–...

CVE-2021-27632

CVE-2021-27632 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) across multiple kernels/versions (e.g., KRNL32NUC KRNL64NUC KRNL64UC and kernels up to 8.04). The root cause is improper input validation in the EnqConvUniToSrvReq() method, allowing unauthenticated network packet...

CVE-2021-27607

Summary. CVE-2021-27607 affects SAP NetWeaver ABAP Server/Platform (Dispatcher). Multiple KRNL and KERNEL versions (e.g., KRNL32NUC 7.22/7.22EXT; KRNL64UC 7.22/7.49/7.53/7.73; KERNEL 7.22/8.04/7.49/7.53/7.73/7.77/7.81/7.82/7.83) are vulnerable. An unauthenticated attacker can send a specially cra...

CVE-2021-27606

CVE-2021-27606 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) across multiple kernels/versions (e.g., KRNL32NUC KRNL64NUC KRNL64UC and KERNEL series). The flaw is an input validation issue in method EncOAMParamStore() that allows an unauthenticated attacker to send a crafted...

CVE-2021-27630

SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) versions including KRNL32NUC (7.22, 7.22EXT), KRNL64NUC (7.22, 7.22EXT, 7.49), KRNL64UC (8.04, 7.22, 7.22EXT, 7.49, 7.53, 7.73), and KERNEL (7.22, 8.04, 7.49, 7.53, 7.73) are affected by CVE-2021-27630. An unauthenticated attacker can s...

CVE-2021-27631

CVE-2021-27631 affects SAP NetWeaver ABAP Server/Platform Enqueue Server (multiple KRNL/KERNEL versions). Root cause: improper input validation in EnqConvUniToSrvReq() permits an unauthenticated network-based packet to trigger an internal error, crash the system and cause a denial of service; no ...

CVE-2021-27628

CVE-2021-27628 affects SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher). The vulnerability stems from improper input validation in DpRTmPrepareReq(), allowing an unauthenticated attacker to send a crafted network packet that triggers an internal error, crashing the system and making it un...

CVE-2021-27629

CVE-2021-27629 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server). The root cause is improper input validation in the EncPSetUnsupported() method, allowing an unauthenticated attacker to send a crafted network packet that triggers an internal error, crashes the system, and rende...