GCVE - cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Netweaver (`27ebb32b-037e-5ce8-844e-70d059f1f917`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-2363`	vulnerable	2026-06-08 05:11:30.013017	Details available SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program code of the user's choice. A malicious user can therefore control the behaviour of the system or can potentially escalate privileges by executing malicious code without legitimate credentials. Published: 2018-01-09T15:00:00.000Z Updated: 2024-08-05T04:14:39.709Z Open on db.gcve.eu Reference links https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ https://launchpad.support.sap.com/#/notes/1906212 http://www.securityfocus.com/bid/102449 https://launchpad.support.sap.com/#/notes/2525392	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5067`	vulnerable	2026-06-08 05:06:48.721117	Details available The (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors, aka SAP Security Notes 2059659 and 2057982. Published: 2015-06-24T14:00:00.000Z Updated: 2024-08-06T06:32:32.510Z Open on db.gcve.eu Reference links https://erpscan.io/advisories/erpscan-15-015-sap-netweaver-hardcoded-credentials/ https://erpscan.io/advisories/erpscan-15-016-sap-netweaver-hardcoded-credentials/ http://scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015 http://packetstormsecurity.com/files/133516/SAP-NetWeaver-AS-LSCT1I13-ABAP-Hardcoded-Credentials.html http://packetstormsecurity.com/files/133515/SAP-NetWeaver-AS-FKCDBFTRACE-ABAP-Hardcoded-Credentials.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2107`	not_vulnerable	2026-06-08 05:06:27.464820	Details available HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges. Published: 2015-03-14T01:00:00.000Z Updated: 2024-08-06T05:02:43.453Z Open on db.gcve.eu Reference links http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04588084 http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04588084 http://www.securitytracker.com/id/1031870	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4003`	vulnerable	2026-06-08 05:05:43.854261	Details available The System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system. Published: 2014-06-09T20:00:00.000Z Updated: 2024-08-06T11:04:28.167Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/126986/SAP-SLD-Information-Tampering.html http://www.securityfocus.com/archive/1/532331/100/0/threaded http://seclists.org/fulldisclosure/2014/Jun/37 http://www.securityfocus.com/bid/67923 http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1964`	vulnerable	2026-06-08 05:05:26.939124	Details available Cross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error. Published: 2014-02-14T15:00:00.000Z Updated: 2024-08-06T09:58:16.352Z Open on db.gcve.eu Reference links https://service.sap.com/sap/support/notes/1788080 https://erpscan.io/advisories/erpscan-14-005-sap-netweaver-dir-error-xss/ http://secunia.com/advisories/56947 http://scn.sap.com/docs/DOC-8218 https://exchange.xforce.ibmcloud.com/vulnerabilities/91095	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1961`	vulnerable	2026-06-08 05:05:26.936177	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1960`	vulnerable	2026-06-08 05:05:26.934575	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7364`	vulnerable	2026-06-08 05:05:10.152703	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6823`	vulnerable	2026-06-08 05:05:07.042204	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6822`	vulnerable	2026-06-08 05:05:07.041935	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6821`	vulnerable	2026-06-08 05:05:07.041665	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6819`	vulnerable	2026-06-08 05:05:07.039906	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6816`	vulnerable	2026-06-08 05:05:07.037142	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3243`	not_vulnerable	2026-06-08 05:04:30.572435	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5260`	vulnerable	2026-06-08 04:59:35.371353	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.