SAP NetWeaver AS ABAP Business Server Pages 750

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750:*:*:*:*:*:*:*

part: a version: 750 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver As Abap Business Server Pages (da706b31-dd5d-50a0-b7e6-ceb381775b2e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29185 vulnerable 2026-06-08 06:02:39.047997 Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)
MEDIUM (5.3)
SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.
Published: 2023-04-11T03:08:03.125Z
Updated: 2025-02-07T17:12:28.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24521 vulnerable 2026-06-08 05:56:05.838518 Details available
MEDIUM (6.1)
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application.
Published: 2023-02-14T03:16:44.948Z
Updated: 2025-03-21T14:03:26.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6324 vulnerable 2026-06-08 05:26:45.141063 Details available
MEDIUM (6.1)
SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s browser leading to Reflected Cross Site Scripting.
Published: 2020-09-09T13:10:53.000Z
Updated: 2024-08-04T08:55:22.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6246 vulnerable 2026-06-08 05:26:44.901549 Details available
MEDIUM (6.1)
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Published: 2020-06-10T12:34:37.000Z
Updated: 2024-08-04T08:55:22.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6229 vulnerable 2026-06-08 05:26:44.846413 Details available
MEDIUM (6.1)
SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
Published: 2020-04-14T18:20:21.000Z
Updated: 2024-08-04T08:55:22.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6217 vulnerable 2026-06-08 05:26:44.778685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6215 vulnerable 2026-06-08 05:26:44.774451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6213 vulnerable 2026-06-08 05:26:44.765605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.