Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap abap platform 751 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-25615
Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data...
Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 754Sap Abap Platform 756Sap Abap Platform 757Sap Abap Platform 791
4
CVSSv2
CVE-2020-6299
SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.
Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 755
6.5
CVSSv2
CVE-2020-6318
A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products,...
Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Abap Platform 730Sap Abap Platform 731
7.5
CVSSv2
CVE-2021-44231
Internally used text extraction reports allow an malicious user to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Sap Abap Platform 701Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Abap Platform 752Sap Abap Platform 756Sap Abap Platform 804Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Application Server Abap 756Sap Netweaver Application Server Abap 804
4
CVSSv2
CVE-2020-6310
Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
Sap Abap Platform 7.50Sap Abap Platform 7.40Sap Abap Platform 7.31Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 710Sap Netweaver Application Server Abap 711Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 755
6.5
CVSSv2
CVE-2020-6296
SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an malicious user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the ...
Sap Abap Platform 7.31Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 710Sap Netweaver Application Server Abap 711Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 755
5
CVSSv2
CVE-2020-6181
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an malicious user to include invalidated data in the HTTP response header sent to a Web user...
Sap Abap Platform 7.50Sap Abap Platform 7.51Sap Abap Platform 7.52Sap Abap Platform 7.53Sap Abap Platform 7.54Sap Netweaver 7.02Sap Netweaver 7.30Sap Netweaver 7.31Sap Netweaver 7.40
5
CVSSv2
CVE-2021-40495
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeave...
Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 751
4
CVSSv2
CVE-2022-22545
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.
Sap Netweaver Abap 700Sap Netweaver Abap 701Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Abap 730Sap Netweaver Abap 756Sap Netweaver Abap 710Sap Netweaver Abap 711
7.5
CVSSv2
CVE-2021-27610
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be expl...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Abap 700Sap Netweaver Abap 701Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Abap 804Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site request forgeryCVE-2024-34351CVE-2024-1076CVE-2024-25522CVE-2024-34547CVE-2024-4644unauthorizedremoteCVE-2024-4671
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook