Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_as_abap_(bsp_framework):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver As Abap (Bsp Framework) (7bb69b6d-a052-529c-ac8d-ed69654c894f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25614 vulnerable 2026-06-08 05:56:09.511953 Details available
MEDIUM (6.1)
SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker to inject the code that can be executed by the application over the network. On successful exploitation it can gain access to the sensitive information which leads to a limited impact on the confidentiality and the integrity of the application.
Published: 2023-02-14T03:20:11.856Z
Updated: 2025-03-20T20:16:11.329Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24522 vulnerable 2026-06-08 05:56:05.844124 Details available
MEDIUM (6.1)
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application.
Published: 2023-02-14T03:17:02.758Z
Updated: 2025-03-20T20:31:30.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24521 vulnerable 2026-06-08 05:56:05.834077 Details available
MEDIUM (6.1)
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application.
Published: 2023-02-14T03:16:44.948Z
Updated: 2025-03-21T14:03:26.159Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.