Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:7.02:*:*:*:*:*:*:*

part: a version: 7.02 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver (27ebb32b-037e-5ce8-844e-70d059f1f917)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6181 vulnerable 2026-06-08 05:26:44.649798 Details available
MEDIUM (5.8)
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.
Published: 2020-02-12T19:46:52.000Z
Updated: 2024-08-04T08:55:22.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8592 vulnerable 2026-06-08 05:06:09.662060 Details available
Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service (process termination) via a crafted request.
Published: 2014-11-04T15:00:00.000Z
Updated: 2024-08-06T13:26:00.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8591 vulnerable 2026-06-08 05:06:09.661020 Details available
Unspecified vulnerability in SAP Internet Communication Manager (ICM), as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service (process termination) via unknown vectors.
Published: 2014-11-04T15:00:00.000Z
Updated: 2024-08-06T13:26:00.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3787 vulnerable 2026-06-08 05:05:42.724633 Details available
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
Published: 2014-05-19T14:00:00.000Z
Updated: 2024-09-16T16:13:23.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1965 vulnerable 2026-06-08 05:05:26.942843 Details available
Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP.
Published: 2014-02-14T15:00:00.000Z
Updated: 2024-08-06T09:58:15.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6815 vulnerable 2026-06-08 05:05:07.034055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6244 vulnerable 2026-06-08 05:04:55.759812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5751 vulnerable 2026-06-08 05:04:53.452752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5263 vulnerable 2026-06-08 04:59:35.384413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.