Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

abap platform vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv3

CVE-2020-6318

A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products,...
Sap Se Sap Netweaver (abap Server) And Abap PlatformSap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 730Sap Abap Platform 731Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 751Sap Abap Platform 753
7.2
CVSSv3

CVE-2024-22131

In SAP ABA (Application Basis) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75I, an attacker authenticated as a user with a remote execution authorization can use a vulnerable interface. This allows the malicious user to use the interface to invoke an application funct...
Sap Sap AbaSap Se Sap Aba (application Basis)Sap Abap Platform 75cSap Abap Platform 75iSap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 731Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 751Sap Abap Platform 752
4.9
CVSSv3

CVE-2023-25615

Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data...
Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 754Sap Abap Platform 756Sap Abap Platform 757Sap Abap Platform 791
8.8
CVSSv3

CVE-2020-6296

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an malicious user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the ...
Sap Se Sap Netweaver (abap Server) And Abap PlatformSap Abap Platform 7.31Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755
4.3
CVSSv3

CVE-2020-6310

Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
Sap Se Sap Netweaver (abap Server) And Abap PlatformSap Abap Platform 7.31Sap Abap Platform 7.40Sap Abap Platform 7.50Sap Abap Platform 700Sap Abap Platform 701Sap Abap Platform 702Sap Abap Platform 710Sap Abap Platform 711Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 755
9.8
CVSSv3

CVE-2021-44231

Internally used text extraction reports allow an malicious user to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Sap Se Sap Abap Server & Abap Platform (translation Tools)Sap Abap Platform 701Sap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 751Sap Abap Platform 752Sap Abap Platform 753Sap Abap Platform 754Sap Abap Platform 755Sap Abap Platform 756Sap Abap Platform 804Sap Netweaver Application Server Abap 701
8.1
CVSSv3

CVE-2021-40501

SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authenticated business user, resulting in escalation of privileges. That means this business user is able to read and modify data beyond the vulnerable system. Howev...
Sap Se Sap Abap Platform KernelSap Abap Platform Kernel 7.77Sap Abap Platform Kernel 7.81Sap Abap Platform Kernel 7.85Sap Abap Platform Kernel 7.86
4.3
CVSSv3

CVE-2020-6299

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.
Sap Se Sap Netweaver (abap Server) And Abap PlatformSap Abap Platform 740Sap Abap Platform 750Sap Abap Platform 751Sap Abap Platform 753Sap Abap Platform 754Sap Abap Platform 755Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750Sap Netweaver Application Server Abap 751Sap Netweaver Application Server Abap 753Sap Netweaver Application Server Abap 754
2.7
CVSSv3

CVE-2020-6280

SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted, leading to Information Disclosure.
Sap Se Sap Netweaver (abap Server) And Abap PlatformSap Abap Platform 7.31Sap Abap Platform 7.40Sap Abap Platform 7.50Sap Netweaver Application Server Abap 731Sap Netweaver Application Server Abap 740Sap Netweaver Application Server Abap 750
5.8
CVSSv3

CVE-2020-6181

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an malicious user to include invalidated data in the HTTP response header sent to a Web user...
Sap Se Sap Netweaver (sap Basis)Sap Se Sap Abap Platform (sap Basis)Sap Abap Platform 7.50Sap Abap Platform 7.51Sap Abap Platform 7.52Sap Abap Platform 7.53Sap Abap Platform 7.54Sap Netweaver 7.02Sap Netweaver 7.30Sap Netweaver 7.31Sap Netweaver 7.40
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-49820firefoxnet/httpCVE-2025-49816konsolefile inclusionCVE-2025-33053theeventscalendarCVE-2025-49822CVE-2025-3052XXEHTML injectionCVE-2025-5959
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook