Sap Netweaver As Abap
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_as_abap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver As Abap (a4ae49bf-0a97-55eb-b247-30009258c49a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35294 |
vulnerable | 2026-06-08 05:46:04.543112 |
Details available
An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is then downloaded and viewed by other users resulting in a stored Cross-Site-Scripting attack. This could lead to information disclosure including stealing authentication information and impersonating the affected user.
Published: 2022-09-13T15:43:33.000Z
Updated: 2024-08-03T09:36:43.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44235 |
vulnerable | 2026-06-08 05:36:45.597041 |
Details available
Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allow an attacker with high privileges and has direct access to SAP System, to inject code when executing with a certain transaction class builder. This could allow execution of arbitrary commands on the operating system, that could highly impact the Confidentiality, Integrity and Availability of the system.
Published: 2021-12-14T15:44:09.000Z
Updated: 2024-08-04T04:17:24.558Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33663 |
vulnerable | 2026-06-08 05:32:12.035500 |
Details available
MEDIUM (5.8)
SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper restriction of I/O buffering into encrypted SMTP sessions over the network which can partially impact the integrity of the application.
Published: 2021-06-09T13:33:06.000Z
Updated: 2024-08-03T23:58:22.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27611 |
vulnerable | 2026-06-08 05:31:21.908955 |
Details available
HIGH (8.2)
SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service.
Published: 2021-05-11T14:19:33.000Z
Updated: 2024-08-03T21:26:09.917Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21446 |
vulnerable | 2026-06-08 05:29:12.040964 |
Details available
HIGH (7.5)
SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service.
Published: 2021-01-12T14:40:18.000Z
Updated: 2024-08-03T18:16:22.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6275 |
vulnerable | 2026-06-08 05:26:44.984795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26835 |
vulnerable | 2026-06-08 05:23:51.585715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.