SAP SE SAP NetWeaver AS ABAP
7 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-35294 | KRNL64NUC 7.22 ; 7.22EXT ; 7.49 ; … | An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is t | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-44235 | < 700 ; < 701 ; < 702 ; … | Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756 | MEDIUM 6.7 | 0.3 % | ||
| CVE-2021-33663 | < KRNL32NUC - 7.22 ; < 7.22EXT ; < KRNL32UC - 7.22 ; … | SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.2 | MEDIUM 5.8 | 0.8 % | ||
| CVE-2021-27611 | < 700 ; < 701 ; < 702 ; … | SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP re | HIGH 8.2 | 0.3 % | ||
| CVE-2021-21446 | < 740 ; < 750 ; < 751 ; … | SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from acces | HIGH 7.5 | 1.5 % | ||
| CVE-2020-26835 | < 740 ; < 750 ; < 751 ; … | SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input maliciou | MEDIUM 6.1 | 0.8 % | ||
| CVE-2020-6275 | < 700 ; < 701 ; < 702 ; … | SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forg | CRITICAL 9.8 | 1.5 % |