Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:*:*:*:*

part: a version: 710 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29611 vulnerable 2026-06-08 05:42:48.668040 Details available
SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Published: 2022-05-11T14:57:20.000Z
Updated: 2024-08-03T06:26:06.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44235 vulnerable 2026-06-08 05:36:45.599910 Details available
Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allow an attacker with high privileges and has direct access to SAP System, to inject code when executing with a certain transaction class builder. This could allow execution of arbitrary commands on the operating system, that could highly impact the Confidentiality, Integrity and Availability of the system.
Published: 2021-12-14T15:44:09.000Z
Updated: 2024-08-04T04:17:24.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40504 vulnerable 2026-06-08 05:35:18.617680 Details available
A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.
Published: 2021-11-10T15:29:16.000Z
Updated: 2024-08-04T02:44:10.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38178 vulnerable 2026-06-08 05:32:55.639521 Details available
The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.
Published: 2021-10-12T14:03:34.000Z
Updated: 2024-08-04T01:37:15.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33678 vulnerable 2026-06-08 05:32:12.106271 Details available
MEDIUM (6.5)
A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some critical information and could make the SAP system completely unavailable.
Published: 2021-07-14T11:04:19.000Z
Updated: 2024-08-03T23:58:22.357Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21490 vulnerable 2026-06-08 05:29:12.154259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21473 vulnerable 2026-06-08 05:29:12.088969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6371 vulnerable 2026-06-08 05:26:45.202583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6310 vulnerable 2026-06-08 05:26:45.099928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6296 vulnerable 2026-06-08 05:26:45.028685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6275 vulnerable 2026-06-08 05:26:44.986629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6270 vulnerable 2026-06-08 05:26:44.973106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6240 vulnerable 2026-06-08 05:26:44.873492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.