GCVE - cpe:2.3:a:sap:netweaver:7.03:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:7.03:*:*:*:*:*:*:*

part: a version: 7.03 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Netweaver (`27ebb32b-037e-5ce8-844e-70d059f1f917`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3787`	vulnerable	2026-06-08 05:05:42.725174	Details available SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors. Published: 2014-05-19T14:00:00.000Z Updated: 2024-09-16T16:13:23.446Z Open on db.gcve.eu Reference links http://en.securitylab.ru/lab/PT-2014-09 http://scn.sap.com/docs/DOC-8218 https://service.sap.com/sap/support/notes/1997455 http://secunia.com/advisories/58671	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6815`	vulnerable	2026-06-08 05:05:07.034609	Details available The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue. Published: 2013-11-19T19:00:00.000Z Updated: 2024-08-06T17:46:23.476Z Open on db.gcve.eu Reference links https://service.sap.com/sap/support/notes/1890819 http://secunia.com/advisories/55620 https://erpscan.io/advisories/erpscan-13-020-sap-netweaver-shsti_upload_xml-xxe/ http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6244`	vulnerable	2026-06-08 05:04:55.759837	Details available The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Published: 2013-10-24T00:00:00.000Z Updated: 2024-09-17T00:46:59.269Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55302 http://en.securitylab.ru/lab/PT-2013-13 https://service.sap.com/sap/support/notes/1820894 http://osvdb.org/98892 http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5751`	vulnerable	2026-06-08 05:04:53.453242	Details available Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors. Published: 2013-09-16T19:00:00.000Z Updated: 2024-08-06T17:22:30.136Z Open on db.gcve.eu Reference links http://secunia.com/advisories/54809 http://osvdb.org/97350 http://en.securitylab.ru/lab/PT-2012-24 https://websmp230.sap-ag.de/sap/support/notes/1779578 http://scn.sap.com/docs/DOC-8218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3319`	vulnerable	2026-06-08 05:04:30.888923	Details available The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128. Published: 2013-08-16T17:00:00.000Z Updated: 2024-08-06T16:07:37.854Z Open on db.gcve.eu Reference links https://service.sap.com/sap/support/notes/1816536 https://exchange.xforce.ibmcloud.com/vulnerabilities/85905 http://scn.sap.com/docs/DOC-8218 http://labs.integrity.pt/advisories/cve-2013-3319/ http://secunia.com/advisories/54277	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.