Sap Netweaver Application Server Abap And Abap Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver Application Server Abap And Abap Platform (b08fff9b-64ca-5175-8343-260fbed00b14) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0509 |
vulnerable | 2026-06-08 07:47:12.449588 |
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
CRITICAL (9.6)
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.
Published: 2026-02-10T03:01:52.913Z
Updated: 2026-02-10T16:27:08.976Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0506 |
vulnerable | 2026-06-08 07:47:12.431678 |
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
HIGH (8.1)
Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines (FORMs) in the ABAP system. Successful exploitation could allow the attacker to write or modify data accessible via FORMs and invoke system functionality exposed via FORMs, resulting in a high impact on integrity and availability, while confidentiality remains unaffected.
Published: 2026-01-13T01:14:33.899Z
Updated: 2026-01-13T18:58:20.906Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42969 |
vulnerable | 2026-06-08 07:25:08.491132 |
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
MEDIUM (6.1)
SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitation, the attacker can access or modify sensitive information within the scope of victim's web browser, with no impact on availability of the application.
Published: 2025-07-08T00:36:41.635Z
Updated: 2025-07-08T16:13:29.209Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31329 |
vulnerable | 2026-06-08 07:17:02.750086 |
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
MEDIUM (6.2)
SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings. An attacker with administrative privileges can craft these instructions so that when accessed by the victim, sensitive information such as user credentials is exposed. These credentials may then be used to gain unauthorized access to local or adjacent systems. This results in high impact to Confidentiality, with no significant effect on Integrity or Availability.
Published: 2025-05-13T00:16:51.190Z
Updated: 2025-05-13T13:55:58.324Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41734 |
vulnerable | 2026-06-08 06:43:55.067686 |
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
MEDIUM (4.3)
Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.
Published: 2024-08-13T04:18:03.596Z
Updated: 2024-08-13T14:38:41.935Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33006 |
vulnerable | 2026-06-08 06:37:25.071859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32733 |
vulnerable | 2026-06-08 06:37:23.745663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49581 |
vulnerable | 2026-06-08 06:14:29.203873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41366 |
vulnerable | 2026-06-08 06:11:06.033580 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41214 |
vulnerable | 2026-06-08 05:48:30.009942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41212 |
vulnerable | 2026-06-08 05:48:30.005317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22545 |
vulnerable | 2026-06-08 05:40:54.233929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.