GCVE - cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*

part: a version: 7.22 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Netweaver As Abap Kernel (`e3ae54d5-5a80-54fa-aab6-6020b8a6a7f2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-24320`	vulnerable	2026-06-08 07:51:17.490872	Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) LOW (3.1) Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory corruption and the potential leakage of memory content. Successful exploitation of this vulnerability would have a low impact on the confidentiality of the application, with no effect on its integrity or availability. Published: 2026-02-10T03:03:42.731Z Updated: 2026-02-10T16:25:30.720Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3678313 https://url.sap/sapsecuritypatchday	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-0509`	vulnerable	2026-06-08 07:47:12.451690	Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform CRITICAL (9.6) SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application. Published: 2026-02-10T03:01:52.913Z Updated: 2026-02-10T16:27:08.976Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3674774 https://url.sap/sapsecuritypatchday	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-29616`	vulnerable	2026-06-08 05:42:48.695158	Details available SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption. Published: 2022-05-11T15:08:03.000Z Updated: 2024-08-03T06:26:06.653Z Open on db.gcve.eu Reference links https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html https://launchpad.support.sap.com/#/notes/3145702	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27656`	vulnerable	2026-06-08 05:42:42.801931	Details available The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Published: 2022-05-11T14:53:55.000Z Updated: 2024-08-03T05:32:59.822Z Open on db.gcve.eu Reference links https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html https://launchpad.support.sap.com/#/notes/3145046	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.