Sap Netweaver Application Server Abap
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver Application Server Abap (bc664ea1-adf4-52ca-b6cd-5215d309d56a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44747 |
vulnerable | 2026-07-29 00:52:14.615663 |
Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
CRITICAL (9.9)
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.
Published: 2026-07-14T00:19:33.450Z
Updated: 2026-07-15T03:58:50.752Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34257 |
vulnerable | 2026-06-08 07:59:11.957505 |
Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
MEDIUM (6.1)
Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.
Published: 2026-04-14T00:08:39.814Z
Updated: 2026-04-14T13:14:17.620Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27680 |
vulnerable | 2026-06-08 07:53:22.871483 |
CSS Injection vulnerability in SAP NetWeaver Application Server ABAP
LOW (3.1)
Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets (CSS) data into a web page served by the application. When a user accesses or clicks the affected page, the injected CSS is executed. As a result, the issue has a low impact on confidentiality, while integrity and availability are not impacted.
Published: 2026-05-14T18:33:26.129Z
Updated: 2026-05-14T19:17:51.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42981 |
vulnerable | 2026-06-08 07:25:08.501158 |
Multiple vulnerabilities in SAP NetWeaver Application Server ABAP
MEDIUM (6.1)
Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at a location not properly sanitized. When a victim clicks on this link, the script executes within the victim's browser, redirecting them to a site controlled by the attacker. This allows the attacker to access and/or modify restricted information related to the web client. While the vulnerability poses no impact on data availability, it presents a considerable risk to confidentiality and integrity.
Published: 2025-07-08T00:38:16.787Z
Updated: 2025-07-08T18:13:50.215Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42956 |
vulnerable | 2026-06-08 07:25:08.456885 |
Multiple vulnerabilities in SAP NetWeaver Application Server ABAP
MEDIUM (6.1)
SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, injected input data will be used by the web site page generation to create content which when executed in the victim's browser leading to low impact on Confidentiality and Integrity with no effect on Availability of the application.
Published: 2025-07-08T06:57:25.262Z
Updated: 2025-07-08T16:12:38.657Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42945 |
vulnerable | 2026-06-08 07:25:08.446597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25242 |
vulnerable | 2026-06-08 07:12:50.879252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23186 |
vulnerable | 2026-06-08 07:10:55.301033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0068 |
vulnerable | 2026-06-08 07:00:29.230873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54198 |
vulnerable | 2026-06-08 06:54:16.171636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47593 |
vulnerable | 2026-06-08 06:48:12.915996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41732 |
vulnerable | 2026-06-08 06:43:55.047926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29610 |
vulnerable | 2026-06-08 05:42:48.662609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.