Sap Netweaver And Abap Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_and_abap_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver And Abap Platform (b294e1c4-4c7d-5a99-bd29-0b9b00416b8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34265 |
vulnerable | 2026-09-16 04:33:47.459549 |
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
CRITICAL (9.8)
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.
Published: 2026-08-11T00:10:52.687Z
Updated: 2026-08-12T03:59:59.331Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76963 |
vulnerable | 2026-09-16 04:32:47.788972 |
Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform
MEDIUM (4.3)
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.
Published: 2026-09-08T00:12:21.196Z
Updated: 2026-09-08T10:34:58.522Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44751 |
vulnerable | 2026-07-29 00:52:14.627957 |
Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform
HIGH (7.1)
Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with low impact on availability and no impact on confidentiality of the application.
Published: 2026-06-09T00:21:17.725Z
Updated: 2026-06-10T13:35:48.087Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27671 |
vulnerable | 2026-07-29 00:35:00.318060 |
Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
CRITICAL (9.8)
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.
Published: 2026-06-09T00:20:04.299Z
Updated: 2026-06-09T13:03:56.011Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42986 |
vulnerable | 2026-06-08 07:25:08.506476 |
Missing Authorization check in SAP NetWeaver and ABAP Platform
MEDIUM (4.3)
Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote Function Call (RFC), potentially accessing restricted system information. This results in low impact on confidentiality, with no impact on integrity or availability of the application.
Published: 2025-07-08T00:38:32.873Z
Updated: 2025-07-08T18:13:40.043Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47593 |
vulnerable | 2026-06-08 06:48:12.915136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33001 |
vulnerable | 2026-06-08 06:37:24.982094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29616 |
vulnerable | 2026-06-08 05:42:48.694982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27668 |
vulnerable | 2026-06-08 05:42:42.949143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22536 |
vulnerable | 2026-06-08 05:40:54.165541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.