Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:756:*:*:*:*:*:*:*

part: a version: 756 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver As Abap Business Server Pages (da706b31-dd5d-50a0-b7e6-ceb381775b2e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29185 vulnerable 2026-06-08 06:02:39.052785 Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)
MEDIUM (5.3)
SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.
Published: 2023-04-11T03:08:03.125Z
Updated: 2025-02-07T17:12:28.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24521 vulnerable 2026-06-08 05:56:05.843122 Details available
MEDIUM (6.1)
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application.
Published: 2023-02-14T03:16:44.948Z
Updated: 2025-03-21T14:03:26.159Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.