Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver (27ebb32b-037e-5ce8-844e-70d059f1f917)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-2434 vulnerable 2026-06-08 05:11:37.130237 Details available
A content spoofing vulnerability in the following components allows to render html pages containing arbitrary plain text content, which might fool an end user: UI add-on for SAP NetWeaver (UI_Infra, 1.0), SAP UI Implementation for Decoupled Innovations (UI_700, 2.0): SAP NetWeaver 7.00 Implementation, SAP User Interface Technology (SAP_UI 7.4, 7.5, 7.51, 7.52). There is little impact as it is not possible to embed active contents such as JavaScript or hyperlinks.
Published: 2018-07-10T18:00:00.000Z
Updated: 2024-08-05T04:21:33.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10311 vulnerable 2026-06-08 05:07:17.748943 Details available
Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.
Published: 2017-04-10T15:00:00.000Z
Updated: 2024-08-06T03:14:42.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2815 vulnerable 2026-06-08 05:06:35.985063 Details available
Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2063369.
Published: 2015-04-01T14:00:00.000Z
Updated: 2024-08-06T05:24:38.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6252 vulnerable 2026-06-08 05:05:56.900615 Details available
Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.20 allows remote authenticated users to cause a denial of service or execute arbitrary code via unspecified vectors.
Published: 2014-09-05T14:00:00.000Z
Updated: 2024-08-06T12:10:12.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3787 vulnerable 2026-06-08 05:05:42.721423 Details available
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
Published: 2014-05-19T14:00:00.000Z
Updated: 2024-09-16T16:13:23.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1965 vulnerable 2026-06-08 05:05:26.941783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6815 vulnerable 2026-06-08 05:05:07.030750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6244 vulnerable 2026-06-08 05:04:55.759753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5751 vulnerable 2026-06-08 05:04:53.449316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1292 vulnerable 2026-06-08 05:00:48.496890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1291 vulnerable 2026-06-08 05:00:48.496589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1290 vulnerable 2026-06-08 05:00:48.496253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1289 vulnerable 2026-06-08 05:00:48.495830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5263 vulnerable 2026-06-08 04:59:35.381897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5260 vulnerable 2026-06-08 04:59:35.373090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1517 vulnerable 2026-06-08 04:58:00.030825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2904 vulnerable 2026-06-08 04:55:11.606330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1609 vulnerable 2026-06-08 04:54:09.261747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2932 vulnerable 2026-06-08 04:51:31.386460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.