Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*

part: a version: 701 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41728 vulnerable 2026-06-08 06:43:55.027437 Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
LOW (2.7)
Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impact on confidentiality, as this attacker would otherwise not have access to view these objects.
Published: 2024-09-10T04:00:56.713Z
Updated: 2024-09-10T13:26:14.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27501 vulnerable 2026-06-08 05:57:41.738913 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
HIGH (8.7)
SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available service to delete system files. In this attack, no data can be read but potentially critical OS files can be deleted making the system unavailable, causing significant impact on both availability and integrity
Published: 2023-03-14T05:06:17.678Z
Updated: 2025-02-27T18:02:25.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27500 vulnerable 2026-06-08 05:57:41.735251 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CRITICAL (9.6)
An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.
Published: 2023-03-14T05:05:20.861Z
Updated: 2024-08-02T12:16:35.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27270 vulnerable 2026-06-08 05:57:40.780486 Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform
MEDIUM (6.5)
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain parameters, which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.
Published: 2023-03-14T04:58:44.671Z
Updated: 2025-02-27T15:02:08.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27269 vulnerable 2026-06-08 05:57:40.779384 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CRITICAL (9.6)
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with non-administrative authorizations to exploit a directory traversal flaw in an available service to overwrite the system files.  In this attack, no data can be read but potentially critical OS files can be overwritten making the system unavailable.
Published: 2023-03-14T04:58:10.184Z
Updated: 2025-02-27T15:03:19.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26459 vulnerable 2026-06-08 05:57:39.734067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25618 vulnerable 2026-06-08 05:56:09.523172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25614 vulnerable 2026-06-08 05:56:09.512027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24522 vulnerable 2026-06-08 05:56:05.844199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23854 vulnerable 2026-06-08 05:56:04.563349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29611 vulnerable 2026-06-08 05:42:48.667048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26102 vulnerable 2026-06-08 05:41:50.533097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22540 vulnerable 2026-06-08 05:40:54.193626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44235 vulnerable 2026-06-08 05:36:45.597980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44231 vulnerable 2026-06-08 05:36:45.565781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42067 vulnerable 2026-06-08 05:35:21.743171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40504 vulnerable 2026-06-08 05:35:18.616248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40496 vulnerable 2026-06-08 05:35:18.574300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38181 vulnerable 2026-06-08 05:32:55.647545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38178 vulnerable 2026-06-08 05:32:55.638201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33678 vulnerable 2026-06-08 05:32:12.105298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27611 vulnerable 2026-06-08 05:31:21.909208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27610 vulnerable 2026-06-08 05:31:21.901904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6310 vulnerable 2026-06-08 05:26:45.099757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6296 vulnerable 2026-06-08 05:26:45.028543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6275 vulnerable 2026-06-08 05:26:44.985792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.