Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_abap:804:*:*:*:*:*:*:*

part: a version: 804 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41214 vulnerable 2026-06-08 05:48:30.010084 Details available
HIGH (8.7)
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-05-01T18:22:17.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41212 vulnerable 2026-06-08 05:48:30.009354 Details available
MEDIUM (4.9)
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the confidentiality of the application.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-05-02T18:04:34.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44231 vulnerable 2026-06-08 05:36:45.571762 Details available
Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Published: 2021-12-14T15:44:08.000Z
Updated: 2024-08-04T04:17:24.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33677 vulnerable 2026-06-08 05:32:12.099482 Details available
MEDIUM (6.5)
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure.
Published: 2021-07-14T11:03:57.000Z
Updated: 2024-08-03T23:58:22.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27610 vulnerable 2026-06-08 05:31:21.907285 Details available
CRITICAL (9)
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.
Published: 2021-06-16T14:45:57.000Z
Updated: 2024-08-03T21:26:09.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6240 vulnerable 2026-06-08 05:26:44.877580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.