GCVE - cpe:2.3:a:sap:netweaver:7.0:sp15:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:7.0:sp15:*:*:*:*:*:*

part: a version: 7.0 update: sp15

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Netweaver (`27ebb32b-037e-5ce8-844e-70d059f1f917`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3787`	vulnerable	2026-06-08 05:05:42.723037	Details available SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors. Published: 2014-05-19T14:00:00.000Z Updated: 2024-09-16T16:13:23.446Z Open on db.gcve.eu Reference links http://en.securitylab.ru/lab/PT-2014-09 http://scn.sap.com/docs/DOC-8218 https://service.sap.com/sap/support/notes/1997455 http://secunia.com/advisories/58671	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6815`	vulnerable	2026-06-08 05:05:07.032456	Details available The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue. Published: 2013-11-19T19:00:00.000Z Updated: 2024-08-06T17:46:23.476Z Open on db.gcve.eu Reference links https://service.sap.com/sap/support/notes/1890819 http://secunia.com/advisories/55620 https://erpscan.io/advisories/erpscan-13-020-sap-netweaver-shsti_upload_xml-xxe/ http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5751`	vulnerable	2026-06-08 05:04:53.450967	Details available Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors. Published: 2013-09-16T19:00:00.000Z Updated: 2024-08-06T17:22:30.136Z Open on db.gcve.eu Reference links http://secunia.com/advisories/54809 http://osvdb.org/97350 http://en.securitylab.ru/lab/PT-2012-24 https://websmp230.sap-ag.de/sap/support/notes/1779578 http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5263`	vulnerable	2026-06-08 04:59:35.381955	Details available Cross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the server parameter. Published: 2013-02-12T20:00:00.000Z Updated: 2024-08-07T00:30:46.801Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45708 http://www.securityfocus.com/bid/49266/info https://exchange.xforce.ibmcloud.com/vulnerabilities/69331 http://dsecrg.com/pages/vul/show.php?id=330 http://www.securityfocus.com/archive/1/520551/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5260`	vulnerable	2026-06-08 04:59:35.375392	Details available Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page parameter. Published: 2013-02-12T20:00:00.000Z Updated: 2024-08-07T00:30:46.851Z Open on db.gcve.eu Reference links https://erpscan.io/advisories/dsecrg-11-037-sap-bw-doc-multiple-xss/ http://dsecrg.com/pages/vul/show.php?id=337 http://www.securityfocus.com/archive/1/520555/100/0/threaded http://www.sdn.sap.com/irj/scn/index?rid=/webcontent/uuid/50316177-762d-2f10-0993-a2206cc349b4	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.