CVE-2019-0365

CVE-2019-0365 affects SAP Kernel components (RFC) including KRNL32NUC, KRNL32UC, KRNL64NUC, KRNL64UC and KERNEL, as well as SAP GUI for Windows (BC-FES-GUI) and SAP GUI for Java (BC-FES-JAV). Versions affected are before 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, and 7.76 for KRNL32NUC, KRNL32UC, ...

CVE-2017-16689

CVE-2017-16689 affects the SAP KERNEL family (32NUC/32Unicode/64NUC/64Unicode) across versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.45, 7.49. The issue is a vulnerability in the Trusted RFC connection that can be established to a different client or user on the same system despite no explicit Trusted/...

CVE-2019-0271

CVE-2019-0271 affects ABAP Server (NetWeaver/Suite/ERP) and ABAP Platform. The vulnerability is an XML External Entity (XEE) issue caused by insufficient validation of XML documents from untrusted sources, enabling potential manipulation via external entities. Affected ranges: ABAP Server 7.00–7....

CVE-2017-16679

CVE-2017-16679 describes a URL redirection vulnerability in SAP Startup Service within SAP Kernel variants (32/64 NUC/Unicode) and multiple kernel versions (7.21, 7.21EXT, 7.22, 7.22EXT, 7.45, 7.49, 7.52). The underlying issue is a vulnerable redirect mechanism that allows an attacker to lead use...

CVE-2018-2441

CVE-2018-2441 affects SAP Change and Transport System (ABAP) and SAP KERNEL variants including 32/64 NUC/Unicode across multiple 7.x releases (7.21, 7.21EXT, 7.22, 7.22EXT, 7.45, 7.49, 7.53, 7.73). Root cause details are not provided in the documents. The vulnerability would allow an attacker to ...

CVE-2009-4603

CVE-2009-4603 affects SAP Kernel components sapstartsrv.exe across versions 6.40, 7.00, 7.01, 7.10, 7.11, 7.20 used in SAP NetWeaver 7.x and SAP Web Application Server 6.x/7.x. The vulnerability allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted reque...

CVE-2017-5997

The CVE-2017-5997 issue affects SAP Kernel’s Message Server HTTP daemon (SAP Kernel versions 7.21–7.49). The root cause is improper memory/resource handling when processing requests with a group parameter sized between 4 KB and 65 KB, which can lead to memory exhaustion and a denial of service (p...

CVE-2018-2360

CVE-2018-2360 affects SAP Startup Service within SAP KERNEL versions 7.45, 7.49, and 7.52, due to a missing authentication check for functions that require user identity. The underlying issue is an authentication bypass that enables consumption of file system storage resources. Public references ...

CVE-2018-2433

CVE-2018-2433 concerns SAP Gateway components (SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.53). The reported effect is that an attacker can prevent legitimate users from accessing a ser...

CVE-2014-9594

The CVE-2014-9594 issue affects the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit. A buffer overflow in the Dispatcher (related to ABAP VM) allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. ERPScan notes that exploits ...

CVE-2014-9595

CVE-2014-9595 affects the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit . It is a buffer overflow vulnerability (in Dispatcher) that can allow a remote, authenticated attacker to cause a denial of service or possibly execute arbitrary code . The advisory confirms that exploit...