Sap Netweaver And Abap Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_and_abap_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver And Abap Platform (b294e1c4-4c7d-5a99-bd29-0b9b00416b8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44751 |
vulnerable | 2026-07-29 00:52:14.627957 |
Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform
HIGH (7.1)
Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with low impact on availability and no impact on confidentiality of the application.
Published: 2026-06-09T00:21:17.725Z
Updated: 2026-06-10T13:35:48.087Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27671 |
vulnerable | 2026-07-29 00:35:00.318060 |
Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
CRITICAL (9.8)
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.
Published: 2026-06-09T00:20:04.299Z
Updated: 2026-06-09T13:03:56.011Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42986 |
vulnerable | 2026-06-08 07:25:08.506476 |
Missing Authorization check in SAP NetWeaver and ABAP Platform
MEDIUM (4.3)
Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote Function Call (RFC), potentially accessing restricted system information. This results in low impact on confidentiality, with no impact on integrity or availability of the application.
Published: 2025-07-08T00:38:32.873Z
Updated: 2025-07-08T18:13:40.043Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47593 |
vulnerable | 2026-06-08 06:48:12.915136 |
Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (4.3)
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or downloaded in an application based on SAP GUI for HTML Technology. This will not compromise the application's integrity or availability.
Published: 2024-11-12T00:27:17.815Z
Updated: 2024-11-12T14:49:44.745Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33001 |
vulnerable | 2026-06-08 06:37:24.982094 |
Denial of service (DOS) in SAP NetWeaver and ABAP platform
MEDIUM (6.5)
SAP NetWeaver and ABAP platform allows an
attacker to impede performance for legitimate users by crashing or flooding the
service.
An
impact of this Denial of Service vulnerability might be long response delays
and service interruptions, thus degrading the service quality experienced by
legitimate users causing high impact on availability of the application.
Published: 2024-06-11T02:05:00.333Z
Updated: 2024-08-02T02:27:53.403Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29616 |
vulnerable | 2026-06-08 05:42:48.694982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27668 |
vulnerable | 2026-06-08 05:42:42.949143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22536 |
vulnerable | 2026-06-08 05:40:54.165541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.