Sap Netweaver
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver (a3bef41b-d1fd-5149-884d-539324d534fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-42958 |
vulnerable | 2026-06-08 07:25:08.461132 |
Missing Authentication check in SAP NetWeaver
CRITICAL (9.1)
Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.
Published: 2025-09-09T02:11:46.733Z
Updated: 2026-02-26T17:49:05.587Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31331 |
vulnerable | 2026-06-08 07:17:02.752469 |
Authorization Bypass vulnerability in SAP NetWeaver
MEDIUM (4.3)
SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.
Published: 2025-04-08T07:15:23.750Z
Updated: 2025-04-08T13:15:55.752Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27898 |
vulnerable | 2026-06-08 06:33:24.974758 |
Server-Side Request Forgery in SAP NetWeaver
MEDIUM (5.3)
SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web application targeting internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. Thus, having a low impact on confidentiality.
Published: 2024-04-09T00:52:54.390Z
Updated: 2024-08-21T15:07:15.427Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0021 |
vulnerable | 2026-06-08 05:52:03.953529 |
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver
MEDIUM (6.1)
Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password, which could lead to reflected Cross-Site scripting. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.
Published: 2023-03-14T04:34:41.118Z
Updated: 2025-02-27T18:16:46.682Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38183 |
vulnerable | 2026-06-08 05:32:55.654617 |
Details available
SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential victim to supply a malicious content to a vulnerable web application, which is then reflected to the victim and executed by the web browser, resulting in Cross-Site Scripting vulnerability.
Published: 2021-10-12T14:04:07.000Z
Updated: 2024-08-04T01:37:16.304Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2363 |
vulnerable | 2026-06-08 05:11:30.012205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.