Sap Netweaver Application Server For Abap
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_application_server_for_abap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver Application Server For Abap (a5be5454-571c-5012-beea-0dc113c69512) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27688 |
vulnerable | 2026-06-08 07:53:22.880605 |
Missing Authorization check in SAP NetWeaver Application Server for ABAP
MEDIUM (5)
Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially escalate their privileges and read the sensitive data, resulting in a limited impact on the confidentiality of the information stored. However, the integrity and availability of the system are not affected.
Published: 2026-03-10T00:18:55.986Z
Updated: 2026-03-11T03:56:30.241Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24316 |
vulnerable | 2026-06-08 07:51:17.482504 |
Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
MEDIUM (6.4)
SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery (SSRF). Successful exploitation could lead to interaction with potentially sensitive internal endpoints, resulting in a low impact on data confidentiality and integrity. There is no impact on availability of the application.
Published: 2026-03-10T00:17:51.285Z
Updated: 2026-03-10T16:53:14.123Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24310 |
vulnerable | 2026-06-08 07:51:17.467006 |
Missing Authorization check in SAP NetWeaver Application Server for ABAP
LOW (3.5)
Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentiality with no effect on the integrity and availability.
Published: 2026-03-10T00:17:21.077Z
Updated: 2026-03-10T16:53:32.884Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24309 |
vulnerable | 2026-06-08 07:51:17.466653 |
Missing Authorization check in SAP NetWeaver Application Server for ABAP
MEDIUM (6.4)
Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced system performance or interruptions. The vulnerability has low impact on the application's integrity and availability, with no effect on confidentiality.
Published: 2026-03-10T00:17:12.592Z
Updated: 2026-03-10T16:53:39.013Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42989 |
vulnerable | 2026-06-08 07:25:08.517460 |
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CRITICAL (9.6)
RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.
Published: 2025-06-10T00:12:16.278Z
Updated: 2026-02-26T17:51:05.930Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42961 |
vulnerable | 2026-06-08 07:25:08.464131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42953 |
vulnerable | 2026-06-08 07:25:08.454303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42942 |
vulnerable | 2026-06-08 07:25:08.443472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42936 |
vulnerable | 2026-06-08 07:25:08.436308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42908 |
vulnerable | 2026-06-08 07:25:08.395752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42882 |
vulnerable | 2026-06-08 07:25:08.373095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26102 |
vulnerable | 2026-06-08 05:41:50.531851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.