Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver abap 7.87 vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2022-29614
SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on...
Sap Netweaver Abap Krnl64nuc 7.22Sap Netweaver Abap Krnl64nuc 7.22extSap Netweaver Abap Kernel 7.22Sap Netweaver Abap Kernel 7.49Sap Netweaver Abap Krnl64uc 7.22Sap Netweaver Abap Krnl64uc 7.22extSap Netweaver Abap Krnl64uc 7.49Sap Netweaver Abap Krnl64uc 7.53Sap Netweaver Abap Kernel 7.53Sap Host Agent 7.22Sap Netweaver Abap Kernel 7.77Sap Netweaver Abap Kernel 7.81Sap Netweaver Abap Kernel 7.85Sap Netweaver Abap Kernel 7.86Sap Netweaver Abap Kernel 7.87Sap Netweaver Abap Kernel 7.88
7.5
CVSSv2
CVE-2022-27668
Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated malicious user to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, ...
Sap Netweaver As Abap Kernel 7.49Sap Netweaver As Abap Kernel 7.77Sap Netweaver As Abap Kernel 7.81Sap Netweaver As Abap Krnl64uc 7.49Sap Netweaver As Abap Krnl64nuc 7.49Sap Router 7.22Sap Router 7.53Sap Netweaver As Abap Kernel 7.85Sap Netweaver As Abap Kernel 7.86Sap Netweaver As Abap Kernel 7.87Sap Netweaver As Abap Kernel 7.88
4
CVSSv2
CVE-2022-29612
SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontro...
Sap Netweaver Abap Krnl64nuc 7.22Sap Netweaver Abap Krnl64nuc 7.22extSap Netweaver Abap Krnl64uc 8.04Sap Netweaver Abap Kernel 7.22Sap Netweaver Abap Kernel 7.49Sap Netweaver Abap Kernel 8.04Sap Netweaver Abap Krnl64uc 7.22Sap Netweaver Abap Krnl64uc 7.22extSap Netweaver Abap Krnl64uc 7.49Sap Host Agent 7.22Sap Netweaver Abap Krnl64uc 7.53Sap Netweaver Abap Kernel 7.77Sap Netweaver Abap Kernel 7.81Sap Netweaver Abap Kernel 7.85Sap Netweaver Abap Kernel 7.86Sap Netweaver Abap Kernel 7.87Sap Netweaver Abap Kernel 7.88Sap Netweaver Abap Kernel 7.53
5
CVSSv2
CVE-2022-29616
SAP Host Agent, SAP NetWeaver and ABAP Platform allow an malicious user to leverage logical errors in memory management to cause a memory corruption.
Sap Netweaver As Abap Krnl64uc 8.04Sap Netweaver As Abap Krnl64uc 7.22extSap Netweaver As Abap Krnl64uc 7.49Sap Netweaver As Abap Krnl64uc 7.53Sap Netweaver As Abap Krnl64uc 7.22Sap Netweaver As Abap Kernel 7.22Sap Netweaver As Abap Kernel 8.04Sap Netweaver As Abap Kernel 7.49Sap Netweaver As Abap Kernel 7.53Sap Netweaver As Abap Kernel 7.77Sap Netweaver As Abap Krnl64nuc 7.22Sap Netweaver As Abap Krnl64nuc 7.22extSap Netweaver As Abap Krnl64nuc 7.49Sap Netweaver As Abap Kernel 7.87Sap Netweaver As Abap Kernel 7.86Sap Netweaver As Abap Kernel 7.85Sap Netweaver As Abap Kernel 7.81
4.3
CVSSv2
CVE-2022-27656
The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Sap Netweaver As Abap Krnl64uc 8.04Sap Netweaver As Abap Krnl64uc 7.22extSap Netweaver As Abap Krnl64uc 7.49Sap Netweaver As Abap Krnl64uc 7.53Sap Netweaver As Abap Krnl64uc 7.22Sap Netweaver As Abap Kernel 7.22Sap Netweaver As Abap Kernel 8.04Sap Netweaver As Abap Kernel 7.49Sap Netweaver As Abap Kernel 7.53Sap Netweaver As Abap Kernel 7.77Sap Netweaver As Abap Kernel 7.81Sap Netweaver As Abap Kernel 7.85Sap Netweaver As Abap Kernel 7.86Sap Netweaver As Abap Kernel 7.87Sap Webdispatcher 7.49Sap Webdispatcher 7.53Sap Webdispatcher 7.77Sap Webdispatcher 7.81Sap Webdispatcher 7.83Sap Webdispatcher 7.85Sap Webdispatcher 7.22ext
10
CVSSv2
CVE-2022-22536
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitra...
Sap Netweaver Application Server Abap Krnl64nuc 7.49Sap Netweaver Application Server Abap Krnl64uc 7.49Sap Netweaver Application Server Abap Krnl64uc 7.53Sap Web Dispatcher 7.53Sap Web Dispatcher 7.77Sap Web Dispatcher 7.81Sap Web Dispatcher 7.22extSap Web Dispatcher 7.49Sap Content Server 7.53Sap Web Dispatcher 7.85Sap Web Dispatcher 7.86Sap Web Dispatcher 7.87Sap Netweaver Application Server Abap Krnl64nuc 7.22Sap Netweaver Application Server Abap Krnl64nuc 7.22extSap Netweaver Application Server Abap Krnl64uc 8.04Sap Netweaver Application Server Abap Krnl64uc 7.22Sap Netweaver Application Server Abap Krnl64uc 7.22extSap Netweaver Application Server Abap 7.22Sap Netweaver Application Server Abap 7.49Sap Netweaver Application Server Abap 7.53Sap Netweaver Application Server Abap 7.77Sap Netweaver Application Server Abap 7.81
5
CVSSv2
CVE-2022-22543
SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53, KRNL64NUC 7.22, 7.22EXT, 7.49, does not sufficiently validate sap-passport information, ...
Sap Netweaver As Abap Krnl64nuc 7.22Sap Netweaver Abap Krnl64nuc 7.22Sap Netweaver As Abap 7.22Sap Netweaver As Abap 7.49Sap Netweaver As Abap 7.53Sap Netweaver As Abap 7.77Sap Netweaver As Abap 7.81Sap Netweaver Abap 7.22Sap Netweaver Abap 7.49Sap Netweaver Abap 7.53Sap Netweaver Abap 7.77Sap Netweaver Abap 7.81Sap Netweaver As Abap 7.22extSap Netweaver Abap 7.22extSap Netweaver As Abap 7.85Sap Netweaver As Abap 7.86Sap Netweaver As Abap 7.87Sap Netweaver As Abap 8.04Sap Netweaver Abap Krnl64nuc 8.04Sap Netweaver Abap 7.87Sap Netweaver Abap 7.85Sap Netweaver Abap 7.86
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook