Sap Netweaver Application Server Abap
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver Application Server Abap (bc664ea1-adf4-52ca-b6cd-5215d309d56a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-66779 |
vulnerable | 2026-09-16 04:32:55.289390 |
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP
MEDIUM (6.3)
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input is processed and reflected within the DOM on the client side during page rendering, resulting in the execution of malicious content in the victim's browser context. Successful exploitation could result in a high impact to the confidentiality and a low impact to the integrity of the system, while availability remains unaffected.
Published: 2026-08-11T00:20:00.386Z
Updated: 2026-08-11T14:26:35.719Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44747 |
vulnerable | 2026-07-29 00:52:14.615663 |
Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
CRITICAL (9.9)
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.
Published: 2026-07-14T00:19:33.450Z
Updated: 2026-07-29T04:52:11.801Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34257 |
vulnerable | 2026-06-08 07:59:11.957505 |
Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
MEDIUM (6.1)
Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, they could be redirected to the page controlled by the attacker. This causes low impact on confidentiality and integrity of the application with no impact on availability.
Published: 2026-04-14T00:08:39.814Z
Updated: 2026-04-14T13:14:17.620Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27680 |
vulnerable | 2026-06-08 07:53:22.871483 |
CSS Injection vulnerability in SAP NetWeaver Application Server ABAP
LOW (3.1)
Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets (CSS) data into a web page served by the application. When a user accesses or clicks the affected page, the injected CSS is executed. As a result, the issue has a low impact on confidentiality, while integrity and availability are not impacted.
Published: 2026-05-14T18:33:26.129Z
Updated: 2026-05-14T19:17:51.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42981 |
vulnerable | 2026-06-08 07:25:08.501158 |
Multiple vulnerabilities in SAP NetWeaver Application Server ABAP
MEDIUM (6.1)
Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at a location not properly sanitized. When a victim clicks on this link, the script executes within the victim's browser, redirecting them to a site controlled by the attacker. This allows the attacker to access and/or modify restricted information related to the web client. While the vulnerability poses no impact on data availability, it presents a considerable risk to confidentiality and integrity.
Published: 2025-07-08T00:38:16.787Z
Updated: 2025-07-08T18:13:50.215Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42956 |
vulnerable | 2026-06-08 07:25:08.456885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42945 |
vulnerable | 2026-06-08 07:25:08.446597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25242 |
vulnerable | 2026-06-08 07:12:50.879252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23186 |
vulnerable | 2026-06-08 07:10:55.301033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0068 |
vulnerable | 2026-06-08 07:00:29.230873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54198 |
vulnerable | 2026-06-08 06:54:16.171636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47593 |
vulnerable | 2026-06-08 06:48:12.915996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41732 |
vulnerable | 2026-06-08 06:43:55.047926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29610 |
vulnerable | 2026-06-08 05:42:48.662609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.