GCVE - cpe:2.3:a:sap:netweaver:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Netweaver (`27ebb32b-037e-5ce8-844e-70d059f1f917`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-6815`	vulnerable	2026-06-08 05:05:07.029770	Details available The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue. Published: 2013-11-19T19:00:00.000Z Updated: 2024-08-06T17:46:23.476Z Open on db.gcve.eu Reference links https://service.sap.com/sap/support/notes/1890819 http://secunia.com/advisories/55620 https://erpscan.io/advisories/erpscan-13-020-sap-netweaver-shsti_upload_xml-xxe/ http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6244`	vulnerable	2026-06-08 05:04:55.758829	Details available The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Published: 2013-10-24T00:00:00.000Z Updated: 2024-09-17T00:46:59.269Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55302 http://en.securitylab.ru/lab/PT-2013-13 https://service.sap.com/sap/support/notes/1820894 http://osvdb.org/98892 http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5260`	vulnerable	2026-06-08 04:59:35.371957	Details available Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page parameter. Published: 2013-02-12T20:00:00.000Z Updated: 2024-08-07T00:30:46.851Z Open on db.gcve.eu Reference links https://erpscan.io/advisories/dsecrg-11-037-sap-bw-doc-multiple-xss/ http://dsecrg.com/pages/vul/show.php?id=337 http://www.securityfocus.com/archive/1/520555/100/0/threaded http://www.sdn.sap.com/irj/scn/index?rid=/webcontent/uuid/50316177-762d-2f10-0993-a2206cc349b4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1609`	vulnerable	2026-06-08 04:54:09.261163	Details available Cross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2010-04-29T17:00:00.000Z Updated: 2024-08-07T01:28:43.185Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/0397 http://www.securityfocus.com/archive/1/509499/100/0/threaded http://secunia.com/advisories/38629 http://archives.neohapsis.com/archives/fulldisclosure/2010-02/0216.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.