SAP NetWeaver Application Server ABAP 756
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*
part: a version: 756 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-44114 |
vulnerable | 2026-06-08 06:45:53.704349 |
Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
LOW (2)
SAP NetWeaver Application Server for ABAP and ABAP Platform allow users with high privileges to execute a program that reveals data over the network. This results in a minimal impact on confidentiality of the application.
Published: 2024-09-10T03:06:18.174Z
Updated: 2024-09-10T13:27:50.746Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41732 |
vulnerable | 2026-06-08 06:43:55.048141 |
Improper Access Control in SAP Netweaver Application Server ABAP
MEDIUM (4.7)
SAP NetWeaver Application Server ABAP allows
an unauthenticated attacker to craft a URL link that could bypass allowlist
controls. Depending on the web applications provided by this server, the
attacker might inject CSS code or links into the web application that could
allow the attacker to read or modify information. There is no impact on
availability of application.
Published: 2024-08-13T03:58:36.444Z
Updated: 2024-08-13T13:28:06.622Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41728 |
vulnerable | 2026-06-08 06:43:55.035104 |
Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
LOW (2.7)
Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impact on confidentiality, as this attacker would otherwise not have access to view these objects.
Published: 2024-09-10T04:00:56.713Z
Updated: 2024-09-10T13:26:14.224Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28763 |
vulnerable | 2026-06-08 06:02:35.411076 |
Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform
MEDIUM (6.5)
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.
Published: 2023-04-11T02:52:07.602Z
Updated: 2025-02-07T16:54:13.312Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27501 |
vulnerable | 2026-06-08 05:57:41.739527 |
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
HIGH (8.7)
SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available service to delete system files. In this attack, no data can be read but potentially critical OS files can be deleted making the system unavailable, causing significant impact on both availability and integrity
Published: 2023-03-14T05:06:17.678Z
Updated: 2025-02-27T18:02:25.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27500 |
vulnerable | 2026-06-08 05:57:41.735463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27270 |
vulnerable | 2026-06-08 05:57:40.780969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27269 |
vulnerable | 2026-06-08 05:57:40.779802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26459 |
vulnerable | 2026-06-08 05:57:39.741340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25618 |
vulnerable | 2026-06-08 05:56:09.523583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25614 |
vulnerable | 2026-06-08 05:56:09.512365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23860 |
vulnerable | 2026-06-08 05:56:04.575265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23859 |
vulnerable | 2026-06-08 05:56:04.573627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23858 |
vulnerable | 2026-06-08 05:56:04.570925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23853 |
vulnerable | 2026-06-08 05:56:04.555002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0013 |
vulnerable | 2026-06-08 05:52:03.908494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29611 |
vulnerable | 2026-06-08 05:42:48.672089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29610 |
vulnerable | 2026-06-08 05:42:48.664908 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22540 |
vulnerable | 2026-06-08 05:40:54.206868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44235 |
vulnerable | 2026-06-08 05:36:45.602162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44231 |
vulnerable | 2026-06-08 05:36:45.571124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42067 |
vulnerable | 2026-06-08 05:35:21.743400 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40504 |
vulnerable | 2026-06-08 05:35:18.618921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40496 |
vulnerable | 2026-06-08 05:35:18.579444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38181 |
vulnerable | 2026-06-08 05:32:55.648352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38178 |
vulnerable | 2026-06-08 05:32:55.645694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.