GCVE - cpe:2.3:a:sap:netweaver:757:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:757:*:*:*:*:*:*:*

part: a version: 757 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Netweaver (`27ebb32b-037e-5ce8-844e-70d059f1f917`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-42968`	vulnerable	2026-06-08 07:25:08.482205	Missing Authorization check in SAP NetWeaver (RFC enabled function module) MEDIUM (5) SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application. Published: 2025-07-08T00:36:31.953Z Updated: 2025-07-08T16:13:36.672Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3621037 https://url.sap/sapsecuritypatchday	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33006`	vulnerable	2026-06-08 06:37:25.070626	File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform CRITICAL (9.6) An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system. Published: 2024-05-14T04:16:06.647Z Updated: 2025-12-16T18:13:19.922Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3448171 https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32114`	vulnerable	2026-06-08 06:04:44.980656	Denial of Service in SAP NetWeaver LOW (2.7) SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application. Published: 2023-06-13T02:38:20.376Z Updated: 2025-01-03T02:06:36.461Z Open on db.gcve.eu Reference links https://launchpad.support.sap.com/#/notes/3325642 https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29186`	vulnerable	2026-06-08 06:02:39.057226	Directory/Path Traversal vulnerability in SAP NetWeaver. HIGH (8.7) In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient (administrative) privileges then potentially critical OS files can be overwritten making the system unavailable. Published: 2023-04-11T03:08:49.584Z Updated: 2025-02-07T17:12:10.486Z Open on db.gcve.eu Reference links https://launchpad.support.sap.com/#/notes/3305907 https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.