Netweaver Abap vulnerabilities | LiveThreat CVE Feed

Product

Netweaver Abap

by Sap · last CVE Aug 13, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities21 In the news0 Timeline

Severity mix

Critical 1High 6Medium 10Low 1

Severity

All severities21 Critical1 High6 Medium10 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Netweaver Abap to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-27610	9.8	1%	Jun 16	SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC… Affected: 700; 701; 702; 731; 740; 750; +6 more
CVE-2021-38178	8.8	1%	Oct 12	The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user… Affected: 700; 701; 702; 710; 730; 731; +8 more
CVE-2022-22543	7.5	1%	Feb 9	SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT,… Affected: 7.22; 7.22ext; 7.49; 7.53; 7.77; 7.81; +6 more
CVE-2021-38181	7.5	1%	Oct 12	SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a… Affected: 700; 701; 702; 730; 731; 740; +7 more
CVE-2021-33677	7.5	1%	Jul 14	SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure Affected: 700; 702; 730; 731; 740; 750; +2 more
CVE-2021-27633	7.5	2%	Jun 9	SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -… Affected: kernel_7.22; kernel_7.49; kernel_7.53; kernel_7.73; kernel_8.04; krnl32nuc_7.22; +10 more
CVE-2021-27597	7.5	2%	Jun 9	SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -… Affected: kernel_7.22; kernel_7.49; kernel_7.53; kernel_7.73; kernel_8.04; krnl32nuc_7.22; +10 more
CVE-2024-33005	6.3	0%	Aug 13	Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can… Affected: kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; kernel_7.89; +6 more
CVE-2021-27634	5.9	1%	Jun 9	SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -… Affected: kernel_7.22; kernel_7.49; kernel_7.53; kernel_7.73; kernel_8.04; krnl32nuc_7.22; +10 more
CVE-2021-40495	5.3	1%	Oct 12	There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755 Affected: 740; 750; 751; 752; 753; 754; +1 more
CVE-2021-33684	5.3	1%	Jul 14	SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,… Affected: 7.21; 7.21ext; 7.22; 7.22ext; 7.49; 7.53; +7 more
CVE-2022-29614	5.0	0%	Jun 14	SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86,… Affected: kernel_7.22; kernel_7.49; kernel_7.53; kernel_7.77; kernel_7.81; kernel_7.85; +9 more
CVE-2022-22545	4.9	1%	Feb 9	A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP… Affected: 700; 701; 702; 710; 711; 730; +9 more
CVE-2022-28215	4.7	1%	Apr 12	SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation Affected: 740; 750; 787
CVE-2022-29612	4.3	1%	Jun 14	SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22,… Affected: kernel_7.22; kernel_7.49; kernel_7.53; kernel_7.77; kernel_7.81; kernel_7.85; +11 more
CVE-2021-42067	4.3	1%	Jan 14	In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use… Affected: 701; 702; 711; 730; 731; 740; +8 more
CVE-2021-40496	4.3	1%	Oct 12	SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit… Affected: 700; 701; 702; 730; 731; 740; +8 more
CVE-2017-9843	2.7	2%	Jul 12	SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+work.exe, aka SAP… Affected: 7.40
CVE-2015-1309	–	2%	Jan 22	XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via… Affected: through 7.31
CVE-2014-8312	–	2%	Oct 16	Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDU_CCMS_GET_PROFILE_PARAM RFC… Affected: 7.31
CVE-2012-4341	–	8%	Aug 15	Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1)… Affected: 7.0; 7.02; 7.03