Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:*:*:*:*

part: a version: 730 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29611 vulnerable 2026-06-08 05:42:48.668993 Details available
SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Published: 2022-05-11T14:57:20.000Z
Updated: 2024-08-03T06:26:06.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44235 vulnerable 2026-06-08 05:36:45.601187 Details available
Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allow an attacker with high privileges and has direct access to SAP System, to inject code when executing with a certain transaction class builder. This could allow execution of arbitrary commands on the operating system, that could highly impact the Confidentiality, Integrity and Availability of the system.
Published: 2021-12-14T15:44:09.000Z
Updated: 2024-08-04T04:17:24.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42067 vulnerable 2026-06-08 05:35:21.743241 Details available
In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible.
Published: 2022-01-14T19:11:31.000Z
Updated: 2024-08-04T03:22:25.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40504 vulnerable 2026-06-08 05:35:18.618553 Details available
A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.
Published: 2021-11-10T15:29:16.000Z
Updated: 2024-08-04T02:44:10.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40496 vulnerable 2026-06-08 05:35:18.576925 Details available
SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit the authentication function by using POST and form field to repeat executions of the initial command by a GET request and exposing sensitive data. This vulnerability is normally exposed over the network and successful exploitation can lead to exposure of data like system details.
Published: 2021-10-12T14:03:51.000Z
Updated: 2024-08-04T02:44:10.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38181 vulnerable 2026-06-08 05:32:55.647677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38178 vulnerable 2026-06-08 05:32:55.640105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33678 vulnerable 2026-06-08 05:32:12.107028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33677 vulnerable 2026-06-08 05:32:12.096624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27611 vulnerable 2026-06-08 05:31:21.910683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21490 vulnerable 2026-06-08 05:29:12.154296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21473 vulnerable 2026-06-08 05:29:12.090127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6371 vulnerable 2026-06-08 05:26:45.202635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6275 vulnerable 2026-06-08 05:26:44.986674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6240 vulnerable 2026-06-08 05:26:44.874004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.