SAP NetWeaver Application Server ABAP 711
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver_application_server_abap:711:*:*:*:*:*:*:*
part: a version: 711 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-29611 |
vulnerable | 2026-06-08 05:42:48.668525 |
Details available
SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Published: 2022-05-11T14:57:20.000Z
Updated: 2024-08-03T06:26:06.632Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44235 |
vulnerable | 2026-06-08 05:36:45.600571 |
Details available
Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allow an attacker with high privileges and has direct access to SAP System, to inject code when executing with a certain transaction class builder. This could allow execution of arbitrary commands on the operating system, that could highly impact the Confidentiality, Integrity and Availability of the system.
Published: 2021-12-14T15:44:09.000Z
Updated: 2024-08-04T04:17:24.558Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42067 |
vulnerable | 2026-06-08 05:35:21.743221 |
Details available
In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible.
Published: 2022-01-14T19:11:31.000Z
Updated: 2024-08-04T03:22:25.941Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40504 |
vulnerable | 2026-06-08 05:35:18.618511 |
Details available
A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.
Published: 2021-11-10T15:29:16.000Z
Updated: 2024-08-04T02:44:10.769Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33678 |
vulnerable | 2026-06-08 05:32:12.106893 |
Details available
MEDIUM (6.5)
A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some critical information and could make the SAP system completely unavailable.
Published: 2021-07-14T11:04:19.000Z
Updated: 2024-08-03T23:58:22.357Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21490 |
vulnerable | 2026-06-08 05:29:12.154277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21473 |
vulnerable | 2026-06-08 05:29:12.089636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6371 |
vulnerable | 2026-06-08 05:26:45.202609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6310 |
vulnerable | 2026-06-08 05:26:45.099948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6296 |
vulnerable | 2026-06-08 05:26:45.028805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6275 |
vulnerable | 2026-06-08 05:26:44.986654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6270 |
vulnerable | 2026-06-08 05:26:44.973929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.