Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_for_abap_and_abap_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server For Abap And Abap Platform (5ef894ca-b767-5a6a-a917-6dc1da93db86)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27270 vulnerable 2026-06-08 05:57:40.780418 Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform
MEDIUM (6.5)
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain parameters, which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.
Published: 2023-03-14T04:58:44.671Z
Updated: 2025-02-27T15:02:08.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27269 vulnerable 2026-06-08 05:57:40.779305 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CRITICAL (9.6)
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with non-administrative authorizations to exploit a directory traversal flaw in an available service to overwrite the system files.  In this attack, no data can be read but potentially critical OS files can be overwritten making the system unavailable.
Published: 2023-03-14T04:58:10.184Z
Updated: 2025-02-27T15:03:19.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23853 vulnerable 2026-06-08 05:56:04.546863 Details available
MEDIUM (6.1)
An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack. Vulnerability has no direct impact on availability.
Published: 2023-02-14T03:13:28.319Z
Updated: 2025-03-20T18:49:33.080Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.