Sap Netweaver Application Server For Abap And Abap Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_application_server_for_abap_and_abap_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver Application Server For Abap And Abap Platform (7384834a-f9bf-5844-bd8f-e8f27f73ef20) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-66767 |
vulnerable | 2026-09-16 04:32:54.824502 |
Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
HIGH (7.7)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session under narrow timing conditions. Successful exploitation could result in high impact on confidentiality and integrity, with low impact on availability of the application.
Published: 2026-09-08T00:11:06.906Z
Updated: 2026-09-09T04:25:49.795Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40135 |
vulnerable | 2026-06-08 08:01:19.930873 |
OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (6.5)
An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrative access to execute specially crafted shell commands on the server, bypassing the logging mechanism. This allows the execution of unintended OS commands without detection, potentially impacting the integrity and availability of the application, with no impact on confidentiality.
Published: 2026-05-12T02:21:40.780Z
Updated: 2026-05-12T13:03:50.003Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0070 |
vulnerable | 2026-06-08 07:00:29.232502 |
Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
CRITICAL (9.9)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper authentication checks, resulting in privilege escalation. On successful exploitation, this can result in potential security concerns. This results in a high impact on confidentiality, integrity, and availability.
Published: 2025-01-14T00:10:03.199Z
Updated: 2025-01-14T15:02:47.651Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0053 |
vulnerable | 2026-06-08 07:00:29.190684 |
Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (5.3)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.
Published: 2025-01-14T00:08:21.600Z
Updated: 2025-01-14T15:01:44.276Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47586 |
vulnerable | 2026-06-08 06:48:12.895053 |
NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
MEDIUM (5.3)
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.
Published: 2024-11-12T00:25:56.315Z
Updated: 2024-11-12T17:14:50.589Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47585 |
vulnerable | 2026-06-08 06:48:12.893830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45285 |
vulnerable | 2026-06-08 06:45:55.819348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44117 |
vulnerable | 2026-06-08 06:45:53.708283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44116 |
vulnerable | 2026-06-08 06:45:53.707847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44115 |
vulnerable | 2026-06-08 06:45:53.707378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44114 |
vulnerable | 2026-06-08 06:45:53.697480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42380 |
vulnerable | 2026-06-08 06:43:56.564174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42371 |
vulnerable | 2026-06-08 06:43:56.537512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41728 |
vulnerable | 2026-06-08 06:43:55.025675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39599 |
vulnerable | 2026-06-08 06:41:51.187557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37180 |
vulnerable | 2026-06-08 06:39:46.822045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34687 |
vulnerable | 2026-06-08 06:37:34.819745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29611 |
vulnerable | 2026-06-08 05:42:48.665933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.