Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver 804 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-36922
Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated malicious user to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. On successful exploitation, th...
Sap Netweaver 600Sap Netweaver 602Sap Netweaver 603Sap Netweaver 604Sap Netweaver 605Sap Netweaver 606Sap Netweaver 617Sap Netweaver 618Sap Netweaver 800Sap Netweaver 802Sap Netweaver 803Sap Netweaver 804Sap Netweaver 805Sap Netweaver 806Sap Netweaver 807
5
CVSSv2
CVE-2021-33677
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure.
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 750Sap Netweaver Abap 700Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 804Sap Netweaver Abap 730Sap Netweaver Abap 784Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 730Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 784Sap Netweaver Application Server Abap 804
NA
CVE-2022-41214
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compr...
Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 804Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 789
NA
CVE-2022-41212
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely comprom...
Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 804Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 789
7.5
CVSSv2
CVE-2021-27610
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be expl...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Abap 700Sap Netweaver Abap 701Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Abap 804Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740
7.5
CVSSv2
CVE-2021-44231
Internally used text extraction reports allow an malicious user to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Sap Abap Platform 701Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Abap Platform 752Sap Abap Platform 756Sap Abap Platform 804Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Application Server Abap 756Sap Netweaver Application Server Abap 804
5
CVSSv2
CVE-2020-6240
SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticated malicious user to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Servi...
Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 710Sap Netweaver Application Server Abap 730Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 804
NA
CVE-2023-37492
SAP NetWeaver Application Server ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 793, SAP...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Application Server Abap 756Sap Netweaver Application Server Abap 757Sap Netweaver Application Server Abap 758Sap Netweaver Application Server Abap 793Sap Netweaver Application Server Abap 804
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook