Sap Netweaver Application Server For Abap And Abap Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_application_server_for_abap_and_abap_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver Application Server For Abap And Abap Platform (7384834a-f9bf-5844-bd8f-e8f27f73ef20) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40135 |
vulnerable | 2026-06-08 08:01:19.930873 |
OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (6.5)
An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrative access to execute specially crafted shell commands on the server, bypassing the logging mechanism. This allows the execution of unintended OS commands without detection, potentially impacting the integrity and availability of the application, with no impact on confidentiality.
Published: 2026-05-12T02:21:40.780Z
Updated: 2026-05-12T13:03:50.003Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0070 |
vulnerable | 2026-06-08 07:00:29.232502 |
Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
CRITICAL (9.9)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper authentication checks, resulting in privilege escalation. On successful exploitation, this can result in potential security concerns. This results in a high impact on confidentiality, integrity, and availability.
Published: 2025-01-14T00:10:03.199Z
Updated: 2025-01-14T15:02:47.651Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0053 |
vulnerable | 2026-06-08 07:00:29.190684 |
Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (5.3)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.
Published: 2025-01-14T00:08:21.600Z
Updated: 2025-01-14T15:01:44.276Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47586 |
vulnerable | 2026-06-08 06:48:12.895053 |
NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (5.3)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.
Published: 2024-11-12T00:25:56.315Z
Updated: 2024-11-12T17:14:50.589Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47585 |
vulnerable | 2026-06-08 06:48:12.893830 |
Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (4.3)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks, resulting in privilege escalation. While authorizations for import and export are distinguished, a single authorization is applied for both, which may contribute to these risks. On successful exploitation, this can result in potential security concerns. However, it has no impact on the integrity and availability of the application and may have only a low impact on data confidentiality.
Published: 2024-12-10T00:12:29.987Z
Updated: 2024-12-10T21:28:59.358Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45285 |
vulnerable | 2026-06-08 06:45:55.819348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44117 |
vulnerable | 2026-06-08 06:45:53.708283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44116 |
vulnerable | 2026-06-08 06:45:53.707847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44115 |
vulnerable | 2026-06-08 06:45:53.707378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44114 |
vulnerable | 2026-06-08 06:45:53.697480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42380 |
vulnerable | 2026-06-08 06:43:56.564174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42371 |
vulnerable | 2026-06-08 06:43:56.537512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41728 |
vulnerable | 2026-06-08 06:43:55.025675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39599 |
vulnerable | 2026-06-08 06:41:51.187557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37180 |
vulnerable | 2026-06-08 06:39:46.822045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34687 |
vulnerable | 2026-06-08 06:37:34.819745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29611 |
vulnerable | 2026-06-08 05:42:48.665933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.