SAP SE SAP NetWeaver (ABAP Server) and ABAP Platform
7 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-41215 | = 700 ; = 731 ; = 740 ; … | SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL | MEDIUM 4.7 | 0.5 % | ||
| CVE-2022-28215 | 740 ; 750 ; 787 | SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious si | MEDIUM 4.7 | 0.8 % | ||
| CVE-2020-6318 | < 700 ; < 701 ; < 702 ; … | A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Becau | CRITICAL 9.1 | 5.8 % | ||
| CVE-2020-6310 | < 702 ; < 730 ; < 731 ; … | Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740 | MEDIUM 4.3 | 0.9 % | ||
| CVE-2020-6299 | < 740 ; < 750 ; < 751 ; … | SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of us | MEDIUM 4.3 | 0.9 % | ||
| CVE-2020-6296 | < 700 ; < 701 ; < 702 ; … | SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to | HIGH 8.8 | 1.3 % | ||
| CVE-2020-6280 | < 731 ; < 740 ; < 750 | SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files whic | LOW 2.7 | 0.9 % |