Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver application server abap 7.40 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-24529
Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an malicious user to execute a Reflected Cross-Site Sc...
Sap Netweaver As Abap Business Server Pages 7.00Sap Netweaver As Abap Business Server Pages 7.01Sap Netweaver As Abap Business Server Pages 7.02Sap Netweaver As Abap Business Server Pages 7.31Sap Netweaver As Abap Business Server Pages 7.40Sap Netweaver As Abap Business Server Pages 7.50Sap Netweaver As Abap Business Server Pages 7.51Sap Netweaver As Abap Business Server Pages 7.52Sap Netweaver As Abap Business Server Pages 75cSap Netweaver As Abap Business Server Pages 75dSap Netweaver As Abap Business Server Pages 75eSap Netweaver As Abap Business Server Pages 75fSap Netweaver As Abap Business Server Pages 75gSap Netweaver As Abap Business Server Pages 75h
6.5
CVSSv2
CVE-2020-6318
A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products,...
Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Abap Platform 730Sap Abap Platform 731
4
CVSSv2
CVE-2020-6310
Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
Sap Abap Platform 7.50Sap Abap Platform 7.40Sap Abap Platform 7.31Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 710Sap Netweaver Application Server Abap 711Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 755
4
CVSSv2
CVE-2020-6280
SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted, leading to Information Disclosure.
Sap Abap Platform 7.50Sap Abap Platform 7.40Sap Abap Platform 7.31Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740
4
CVSSv2
CVE-2019-0271
ABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an XML document accepted from an untrusted source, leading to an XML External Entity (XEE) vulnerability. Fixed in Kernel 7.21 or 7.22, that is ABAP Server 7.00 to 7.31 and Kernel 7.45,...
Sap Advanced Business Application Programming ServerSap Advanced Business Application Programming Platform -Sap Sap Kernel 7.22Sap Sap Kernel 7.21Sap Sap Kernel 7.49Sap Sap Kernel 7.45Sap Sap Kernel 7.53
6.5
CVSSv2
CVE-2019-0257
Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privil...
Sap Netweaver As AbapSap Netweaver Application Server Abap 7.31Sap Netweaver Application Server AbapSap Netweaver Application Server Abap 7.30Sap Netweaver Application Server Abap 7.40
4.3
CVSSv2
CVE-2018-2470
In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Sap NetweaverSap Netweaver 7.30Sap Netweaver 7.31Sap Netweaver 7.40
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook