Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver (27ebb32b-037e-5ce8-844e-70d059f1f917) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-27898 |
vulnerable | 2026-06-08 06:33:24.973271 |
Server-Side Request Forgery in SAP NetWeaver
MEDIUM (5.3)
SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web application targeting internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. Thus, having a low impact on confidentiality.
Published: 2024-04-09T00:52:54.390Z
Updated: 2024-08-21T15:07:15.427Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2470 |
vulnerable | 2026-06-08 05:11:37.218037 |
Details available
In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2018-10-09T13:00:00.000Z
Updated: 2024-08-05T04:21:34.206Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5372 |
vulnerable | 2026-06-08 05:09:46.800516 |
Details available
The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by leveraging a missing authorization check for the (1) getInformation, (2) getParameters, (3) getServiceInfo, (4) getStatistic, or (5) getClientStatistic function, aka SAP Security Note 2331908.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-05T14:55:35.809Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7241 |
vulnerable | 2026-06-08 05:07:00.195384 |
Details available
XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.
Published: 2017-09-06T21:00:00.000Z
Updated: 2024-08-06T07:43:45.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8587 |
vulnerable | 2026-06-08 05:06:09.655612 |
Details available
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.
Published: 2014-11-04T15:00:00.000Z
Updated: 2024-09-16T20:17:25.356Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3787 |
vulnerable | 2026-06-08 05:05:42.720803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0995 |
vulnerable | 2026-06-08 05:05:15.386602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6815 |
vulnerable | 2026-06-08 05:05:07.028833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6814 |
vulnerable | 2026-06-08 05:05:07.027763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6244 |
vulnerable | 2026-06-08 05:04:55.758067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5263 |
vulnerable | 2026-06-08 04:59:35.381870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4707 |
vulnerable | 2026-06-08 04:59:32.720512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2904 |
vulnerable | 2026-06-08 04:55:11.605233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3358 |
vulnerable | 2026-06-08 04:50:34.372199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.