CVE-2021-33690

SAP NetWeaver Development Infrastructure Component Build Service (NWDI Build Service) versions 7.11–7.50 are affected by a Server-Side Request Forgery (SSRF) vulnerability. The issue allows an attacker with server access to perform proxy requests, potentially exposing sensitive data and affecting...

CVE-2022-29618

The connected records confirm a cross-site scripting (XSS) vulnerability in SAP NetWeaver Development Infrastructure (Design Time Repository) affecting versions 7.30, 7.31, 7.40, and 7.50. Root cause: insufficient input validation that lets an unauthenticated attacker inject script into the URL, ...

CVE-2021-33691

The CVE-2021-33691 issue affects SAP NetWeaver Development Infrastructure (NWDI) Notification Service, specifically versions 7.31, 7.40, and 7.50. The root cause is insufficient encoding of user-supplied inputs, which enables Cross-Site Scripting (XSS). A threat actor could send crafted scripts t...

CVE-2013-6820

CVE-2013-6820 describes an unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) that allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors. According to NVD, the issue yields a CVSS v2 ba...