Sap Netweaver As Abap And Abap Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_as_abap_and_abap_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver As Abap And Abap Platform (99af5713-9421-5a30-9dff-deefd7b906e1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44748 |
vulnerable | 2026-07-29 00:52:14.617608 |
XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform
CRITICAL (9.9)
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information leading to unauthorized access to sensitive user data and potential disruption of normal system usage. This causes a high impact on confidentiality, integrity and availability of the application.
Published: 2026-06-09T00:20:58.456Z
Updated: 2026-06-09T13:03:17.251Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23687 |
vulnerable | 2026-06-08 07:51:15.985398 |
XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform
HIGH (8.8)
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.
Published: 2026-02-10T03:02:47.674Z
Updated: 2026-06-09T07:13:21.422Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42902 |
vulnerable | 2026-06-08 07:25:08.390719 |
Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform
MEDIUM (5.3)
Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it has a low impact on the availability but no impact on the confidentiality and integrity.
Published: 2025-10-14T00:17:32.898Z
Updated: 2025-10-14T15:22:05.634Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0063 |
vulnerable | 2026-06-08 07:00:29.218340 |
SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
HIGH (8.8)
SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromise of confidentiality, integrity and availability.
Published: 2025-01-14T00:09:28.885Z
Updated: 2025-01-14T14:51:11.362Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30218 |
vulnerable | 2026-06-08 06:35:29.267503 |
Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
MEDIUM (6.5)
The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.
Published: 2024-04-09T01:04:40.206Z
Updated: 2024-09-28T22:27:25.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37492 |
vulnerable | 2026-06-08 06:08:15.511136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35874 |
vulnerable | 2026-06-08 06:06:28.021601 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40496 |
vulnerable | 2026-06-08 05:35:18.565993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40495 |
vulnerable | 2026-06-08 05:35:18.555562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38181 |
vulnerable | 2026-06-08 05:32:55.647043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38178 |
vulnerable | 2026-06-08 05:32:55.626989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33684 |
vulnerable | 2026-06-08 05:32:12.134983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33677 |
vulnerable | 2026-06-08 05:32:12.089317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27610 |
vulnerable | 2026-06-08 05:31:21.891317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.