Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:sap_basis:*:*:*

part: a version: 751 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029)
Edition*
Language*
Software editionsap_basis
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0506 vulnerable 2026-06-08 07:47:12.436948 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
HIGH (8.1)
Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines (FORMs) in the ABAP system. Successful exploitation could allow the attacker to write or modify data accessible via FORMs and invoke system functionality exposed via FORMs, resulting in a high impact on integrity and availability, while confidentiality remains unaffected.
Published: 2026-01-13T01:14:33.899Z
Updated: 2026-01-13T18:58:20.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21738 vulnerable 2026-06-08 06:27:36.431539 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform
MEDIUM (4.1)
SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful exploitation.
Published: 2024-01-09T01:19:29.437Z
Updated: 2025-06-03T14:33:28.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0014 vulnerable 2026-06-08 05:52:03.921955 Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CRITICAL (9)
SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, KERNEL 7.22, 7.53, 7.77, 7.81, 7.85, 7.89, KRNL64UC 7.22, 7.22EXT, 7.53, KRNL64NUC 7.22, 7.22EXT, creates information about system identity in an ambiguous format. This could lead to capture-replay vulnerability and may be exploited by malicious users to obtain illegitimate access to the system.
Published: 2023-01-10T03:02:39.962Z
Updated: 2025-04-09T13:59:20.601Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.