Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap basis 7.31 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2018-2478
An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the <sid>adm user....
Sap Basis 7.31Sap Basis 7.40Sap BasisSap Basis 7.30
4
CVSSv2
CVE-2020-6307
Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.
Sap Basis 7.0Sap Basis 7.01Sap Basis 7.02Sap Basis 7.31Sap Basis 7.40Sap Basis 7.50Sap Basis 7.51Sap Basis 7.52Sap Basis 7.53Sap Basis 7.54
NA
CVE-2022-41264
Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an authenticated non-administrator malicious user to access a system class and execute any of its public methods with parameters ...
Sap Basis 7.31Sap Basis 7.40Sap Basis 7.50Sap Basis 7.51Sap Basis 7.52Sap Basis 7.53Sap Basis 7.54Sap Basis 7.55Sap Basis 7.56Sap Basis 7.57Sap Basis 7.89Sap Basis 7.90Sap Basis 7.91
4.3
CVSSv2
CVE-2019-0321
ABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver As Abap 7.4Sap Netweaver As Abap 7.5Sap Netweaver Application Server Abap 7.31
6.5
CVSSv2
CVE-2019-0279
ABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CREATE_TCPIP_RFCDEST, and INST_CREATE_TCPIP_RFC_DEST in SAP BASIS (fixed in versions 7.0 to 7.02, 7.10 to 7.30, 7.31, 7.40, 7.50 to 7.53) do not perform necessary authorization checks in all circumstances for an authentica...
Sap Business Application Software Integrated Solution 7.31Sap Business Application Software Integrated SolutionSap Business Application Software Integrated Solution 7.40
6.5
CVSSv2
CVE-2018-2494
Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards delivered as ABAP Platform.
Sap Business Application Software Integrated SolutionSap Business Application Software Integrated Solution 7.31Sap Business Application Software Integrated Solution 7.40
9
CVSSv2
CVE-2019-0328
ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.
Sap Netweaver Process Integration 7.0Sap Netweaver Process Integration 7.1Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.5Sap Netweaver Process Integration 7.3Sap Netweaver Process Integration 7.4
6.5
CVSSv2
CVE-2018-2363
SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program code of the user's choice. A malicious user can therefore control the behaviour of the system or can potentially esc...
Sap Netweaver -Sap Business Application Software Integrated Solution 7.30Sap Business Application Software Integrated SolutionSap Business Application Software Integrated Solution 7.40Sap Business Application Software Integrated Solution 7.31
6.5
CVSSv2
CVE-2018-2367
ABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an malicious user to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" a...
Sap Business Application Software Integrated SolutionSap Business Application Software Integrated Solution 7.31Sap Business Application Software Integrated Solution 7.40Sap Business Application Software Integrated Solution 7.30
6.5
CVSSv2
CVE-2017-16682
SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.
Sap Netweaver Internet Transaction Server -Sap Business Application Software Integrated SolutionSap Business Application Software Integrated Solution 7.31Sap Business Application Software Integrated Solution 7.40Sap Business Application Software Integrated Solution 7.30
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook