SAP

Netweaver Application Server Abap

81 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2020-26818

  • EPSS 0.27%
  • Veröffentlicht 10.11.2020 17:15:13
  • Zuletzt bearbeitet 21.11.2024 05:20:20

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileg...

4.3

CVE-2020-6371

  • EPSS 0.2%
  • Veröffentlicht 15.10.2020 02:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:35

User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710, 711, 730, 731, 740, 750, leading to Informati...

4.3

CVE-2020-6310

  • EPSS 0.26%
  • Veröffentlicht 12.08.2020 14:15:14
  • Zuletzt bearbeitet 21.11.2024 05:35:29

Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.

4.3

CVE-2020-6299

  • EPSS 0.23%
  • Veröffentlicht 12.08.2020 14:15:14
  • Zuletzt bearbeitet 21.11.2024 05:35:27

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.

8.8

CVE-2020-6296

  • EPSS 0.5%
  • Veröffentlicht 12.08.2020 14:15:14
  • Zuletzt bearbeitet 21.11.2024 05:35:27

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby cont...

4

CVE-2020-6280

  • EPSS 0.23%
  • Veröffentlicht 14.07.2020 13:15:12
  • Zuletzt bearbeitet 21.11.2024 05:35:25

SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted, leading to Information Disclosure.

9.8

CVE-2020-6275

  • EPSS 0.46%
  • Veröffentlicht 10.06.2020 13:15:18
  • Zuletzt bearbeitet 21.11.2024 05:35:25

SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in an attacker can use inappropriate path names containing malicious server names in the impo...

6.5

CVE-2020-6270

  • EPSS 0.17%
  • Veröffentlicht 10.06.2020 13:15:18
  • Zuletzt bearbeitet 21.11.2024 05:35:24

SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected ch...

7.5

CVE-2020-6240

  • EPSS 1.44%
  • Veröffentlicht 12.05.2020 18:15:13
  • Zuletzt bearbeitet 21.11.2024 05:35:21

SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service le...

6.1

CVE-2019-0321

  • EPSS 0.35%
  • Veröffentlicht 10.07.2019 19:15:10
  • Zuletzt bearbeitet 21.11.2024 04:16:40

ABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.