SAP Bugs Under Active Cyberattack

🗓️ 06 Apr 2021 18:47:57Reported by Tara SealsType

Active cyberattacks targeting critical SAP applications could lead to full system control and data theft, fraud, and ransomware delivery, impacting global organizations, including government agencies and technology companies

Reporter	Title	Published	Views	Family All 145
Gitee	Exploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java	27 Nov 202020:06	–	gitee
zdt	SAP NetWeaver AS JAVA 7.1 < 7.5 - Directory Traversal	21 Jun 201600:00	–	zdt
zdt	SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution Exploit	16 Mar 201800:00	–	zdt
zdt	SAP Solution Manager 7.2 Remote Command Execution Exploit	26 Mar 202100:00	–	zdt
GithubExploit	Exploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java	21 Jul 202001:22	–	githubexploit
GithubExploit	Exploit for Path Traversal in Sap Netweaver_Application_Server_Java	15 Jul 202015:20	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Sap Solution_Manager	14 Jan 202110:49	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java	20 Jul 202018:45	–	githubexploit
ICS	Critical Vulnerability in SAP NetWeaver AS Java	13 Jul 202012:00	–	ics
ATTACKERKB	CVE-2010-5326	13 May 201600:00	–	attackerkb

Source	Link
us-cert	www.us-cert.cisa.gov/ncas/current-activity/2021/04/06/malicious-cyber-activity-targeting-critical-sap-applications
threatpost	www.threatpost.com/newsletter-sign/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-6287
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-6207
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-2380
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-9563
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-3976
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-5326
threatpost	www.threatpost.com/critical-sap-bug-enterprise-system-takeover/157392/
threatpost	www.threatpost.com/webinars/underground-markets-a-tour-of-the-dark-economy/

06 Apr 2021 18:47Current

0.7Low risk

Vulners AI Score0.7

EPSS0.98266