Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver 702 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2021-38183
SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an malicious user to cause a potential victim to supply a malicious content to a vulnerable web application, which is then reflected to the victim and executed by the web br...
Sap Netweaver 700Sap Netweaver 701Sap Netweaver 702Sap Netweaver 730
NA
CVE-2023-0021
Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthenticated malicious user to inject code that may expose sensitive data like user ID and password, which could lead to reflected Cross-Site scripting. These endpoints...
Sap Netweaver 701Sap Netweaver 702Sap Netweaver 700Sap Netweaver 731Sap Netweaver 740Sap Netweaver 750
NA
CVE-2023-32114
SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead t...
Sap Netweaver 702Sap Netweaver 731Sap Netweaver 740Sap Netweaver 750Sap Netweaver 751Sap Netweaver 752Sap Netweaver 753Sap Netweaver 754Sap Netweaver 755Sap Netweaver 756Sap Netweaver 757
4.3
CVSSv2
CVE-2022-22534
Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated malicious user to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confi...
Sap Netweaver 701Sap Netweaver 702Sap Netweaver 700Sap Netweaver 731Sap Netweaver 740Sap Netweaver 750Sap Netweaver 751Sap Netweaver 752Sap Netweaver 753Sap Netweaver 754Sap Netweaver 755Sap Netweaver 756
5
CVSSv2
CVE-2021-33677
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure.
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 750Sap Netweaver Abap 700Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 804Sap Netweaver Abap 730Sap Netweaver Abap 784Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 730Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 784Sap Netweaver Application Server Abap 804
5.5
CVSSv2
CVE-2022-26102
Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction that is available with in the same SAP system even if he/she isn't authoriz...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 701
NA
CVE-2023-24522
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended dat...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 701
4.6
CVSSv2
CVE-2021-27611
SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged malicious user to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a de...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 730Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 701
4
CVSSv2
CVE-2022-22545
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.
Sap Netweaver Abap 700Sap Netweaver Abap 701Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Abap 730Sap Netweaver Abap 756Sap Netweaver Abap 710Sap Netweaver Abap 711
7.5
CVSSv2
CVE-2021-27610
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be expl...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Abap 700Sap Netweaver Abap 701Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Abap 804Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook