SAP NetWeaver Application Server ABAP 754 SAP UI
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:sap_ui:*:*:*
part: a version: 754 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029) |
| Edition | * |
| Language | * |
| Software edition | sap_ui |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-40624 |
vulnerable | 2026-06-08 06:11:04.019581 |
Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering)
MEDIUM (5.5)
SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 702, SAP_BASIS 731, allows an attacker to inject JavaScript code that can be executed in the web-application. An attacker could thereby control the behavior of this web-application.
Published: 2023-09-12T02:00:30.824Z
Updated: 2024-09-25T20:15:00.246Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33664 |
vulnerable | 2026-06-08 05:32:12.055301 |
Details available
MEDIUM (5.4)
SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702, 731 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2021-06-09T13:32:50.000Z
Updated: 2024-08-03T23:58:22.366Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.