Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap abap platform 755 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv3
CVE-2020-6299
SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.
Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 755
7.2
CVSSv3
CVE-2020-6318
A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products,...
Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Abap Platform 730Sap Abap Platform 731
9.8
CVSSv3
CVE-2021-44231
Internally used text extraction reports allow an malicious user to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Sap Abap Platform 701Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 754Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Abap Platform 752Sap Abap Platform 756Sap Abap Platform 804Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Application Server Abap 756Sap Netweaver Application Server Abap 804
8.8
CVSSv3
CVE-2020-6296
SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an malicious user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the ...
Sap Abap Platform 7.31Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Abap Platform 740Sap Abap Platform 750Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 710Sap Netweaver Application Server Abap 711Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 755
4.3
CVSSv3
CVE-2020-6310
Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
Sap Abap Platform 7.50Sap Abap Platform 7.40Sap Abap Platform 7.31Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 710Sap Netweaver Application Server Abap 711Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 755
4.6
CVSSv3
CVE-2023-29109
The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel formula injection. An authorized attacker can inject arbitrary Excel formulas into fields like the Tooltip ...
Sap Abap Platform 75cSap Abap Platform 75dSap Abap Platform 75eSap Basis 755Sap Basis 756Sap S4core 101Sap Application Interface Framework Aifx 702Sap Application Interface Framework Aif 703
5.4
CVSSv3
CVE-2023-29110
The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and li...
Sap Abap Platform 75cSap Abap Platform 75dSap Abap Platform 75eSap Basis 755Sap Basis 756Sap S4core 101Sap Application Interface Framework Aifx 702Sap Application Interface Framework Aif 703Sap S4core 100
5.3
CVSSv3
CVE-2021-40495
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeave...
Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 751
4.9
CVSSv3
CVE-2022-22545
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.
Sap Netweaver Abap 700Sap Netweaver Abap 701Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Abap 730Sap Netweaver Abap 756Sap Netweaver Abap 710Sap Netweaver Abap 711
9.8
CVSSv3
CVE-2021-27610
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be expl...
Sap Netweaver Application Server Abap 702Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 752Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754Sap Netweaver Application Server Abap 755Sap Netweaver Abap 700Sap Netweaver Abap 701Sap Netweaver Abap 702Sap Netweaver Abap 731Sap Netweaver Abap 740Sap Netweaver Abap 750Sap Netweaver Abap 751Sap Netweaver Abap 752Sap Netweaver Abap 753Sap Netweaver Abap 754Sap Netweaver Abap 755Sap Netweaver Abap 804Sap Netweaver Application Server Abap 700Sap Netweaver Application Server Abap 701Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook