Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver application server abap vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2024-30218
The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an malicious user to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.
NA
CVE-2024-24740
SAP NetWeaver Application Server (ABAP) - versions KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.93, KERNEL 7.94, KRNL64UC 7.53, under certain conditions, allows an malicious user to access information which could otherwise be restricted with low impac...
NA
CVE-2024-21738
SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful e...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Application Server Abap 756Sap Netweaver Application Server Abap 757Sap Netweaver Application Server Abap 758Sap Netweaver Application Server Abap 793Sap Netweaver Application Server Abap 79
NA
CVE-2023-49581
SAP GUI for Windows and SAP GUI for Java allow an unauthenticated malicious user to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated malicious user to write data to a database table. By doing so th...
Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750
NA
CVE-2023-41366
Under certain condition SAP NetWeaver Application Server ABAP - versions KERNEL 722, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KERNEL 7.94, KERNEL64UC 7.22, KERNEL64UC 7.22EXT, KERNEL64UC 7.53, KERNEL64NUC 7.22, KERNEL...
Sap Netweaver Application Server Abap Kernel 7.53Sap Netweaver Application Server Abap Kernel 7.77Sap Netweaver Application Server Abap Kernel 7.22Sap Netweaver Application Server Abap Kernel 7.85Sap Netweaver Application Server Abap Kernel 7.89Sap Netweaver Application Server Abap Kernel 7.54Sap Netweaver Application Server Abap Kernel 7.92Sap Netweaver Application Server Abap Kernel 7.93Sap Netweaver Application Server Abap Kernel64nuc 7.22Sap Netweaver Application Server Abap Kernel64nuc 7.22extSap Netweaver Application Server Abap Kernel64uc 7.22Sap Netweaver Application Server Abap Kernel64uc 7.22extSap Netweaver Application Server Abap Kernel64uc 7.53Sap Netweaver Application Server Abap Kernel 7.91Sap Netweaver Application Server Abap Kernel 7.94
NA
CVE-2023-40309
SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could a...
Sap Netweaver Application Server Abap Kernel 7.53Sap Netweaver Application Server Abap Kernel 7.77Sap Web Dispatcher 7.53Sap Web Dispatcher 7.77Sap Web Dispatcher 7.22extSap Content Server 7.53Sap Web Dispatcher 7.85Sap Netweaver Application Server Abap Kernel 7.22Sap Netweaver Application Server Abap Kernel 8.04Sap Netweaver Application Server Abap 7.22extSap Netweaver Application Server Abap Kernel 7.85Sap Web Dispatcher 7.89Sap Web Dispatcher 7.54Sap Netweaver Application Server Abap Kernel 7.89Sap Netweaver Application Server Abap Kernel 7.54Sap Netweaver Application Server Abap Kernel 7.92Sap Netweaver Application Server Abap Kernel 7.93Sap Content Server 6.50Sap Content Server 7.54Sap Hana Database 2.0Sap Host Agent 722Sap Extended Application Services And Runtime 1.0
NA
CVE-2023-40624
SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 702, SAP_BASIS 731, allows an malicious user to inject JavaScript code that can be executed in the web-application. An attacker could t...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 756Sap Netweaver Application Server Abap 757Sap Netweaver Application Server Abap 758
NA
CVE-2023-40308
SAP CommonCryptoLib allows an unauthenticated malicious user to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any ...
Sap Netweaver Application Server Abap Kernel 7.53Sap Netweaver Application Server Abap Kernel 7.77Sap Web Dispatcher 7.53Sap Web Dispatcher 7.77Sap Web Dispatcher 7.22extSap Content Server 7.53Sap Web Dispatcher 7.85Sap Netweaver Application Server Abap Kernel 7.22Sap Netweaver Application Server Abap Kernel 8.04Sap Netweaver Application Server Abap 7.22extSap Netweaver Application Server Abap Kernel 7.85Sap Web Dispatcher 7.89Sap Web Dispatcher 7.54Sap Netweaver Application Server Abap Kernel 7.89Sap Netweaver Application Server Abap Kernel 7.54Sap Netweaver Application Server Abap Kernel 7.92Sap Netweaver Application Server Abap Kernel 7.93Sap Content Server 6.50Sap Content Server 7.54Sap Hana Database 2.0Sap Host Agent 722Sap Extended Application Services And Runtime 1.0
NA
CVE-2023-37492
SAP NetWeaver Application Server ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 793, SAP...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Application Server Abap 756Sap Netweaver Application Server Abap 757Sap Netweaver Application Server Abap 758Sap Netweaver Application Server Abap 793Sap Netweaver Application Server Abap 804
NA
CVE-2023-35874
SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNEL 7.93, under some c...
Sap Netweaver Application Server Abap Krnl64uc 7.53Sap Netweaver Application Server Abap Kernel 7.53Sap Netweaver Application Server Abap Kernel 7.77Sap Netweaver Application Server Abap Kernel 7.81Sap Netweaver Application Server Abap Krnl64nuc 7.22Sap Netweaver Application Server Abap Krnl64nuc 7.22extSap Netweaver Application Server Abap Kernel 7.22Sap Netweaver Application Server Abap Krnl64uc 7.22Sap Netweaver Application Server Abap Krnl64uc 7.22extSap Netweaver Application Server Abap Kernel 7.85Sap Netweaver Application Server Abap Kernel 7.89Sap Netweaver Application Server Abap Kernel 7.54Sap Netweaver Application Server Abap Kernel 7.92Sap Netweaver Application Server Abap Kernel 7.93
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook