Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_abap:789:*:*:*:*:*:*:*

part: a version: 789 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Abap (6edd41b2-bbcf-5aa6-b52a-8ef36307c029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-23860 vulnerable 2026-06-08 05:56:04.575300 Details available
MEDIUM (6.1)
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a link, which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack.
Published: 2023-02-14T03:16:18.411Z
Updated: 2025-03-20T18:46:16.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23859 vulnerable 2026-06-08 05:56:04.573665 Details available
MEDIUM (6.1)
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information.
Published: 2023-02-14T03:15:54.117Z
Updated: 2025-03-20T18:47:11.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23853 vulnerable 2026-06-08 05:56:04.560449 Details available
MEDIUM (6.1)
An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack. Vulnerability has no direct impact on availability.
Published: 2023-02-14T03:13:28.319Z
Updated: 2025-03-20T18:49:33.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41215 vulnerable 2026-06-08 05:48:30.012445 Details available
MEDIUM (4.7)
SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-30T13:59:19.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41214 vulnerable 2026-06-08 05:48:30.010067 Details available
HIGH (8.7)
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-05-01T18:22:17.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41212 vulnerable 2026-06-08 05:48:30.008625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.