Netweaver AS Abap Business Server Pages vulnerabilities

Product

Netweaver AS Abap Business Server Pages

by Sap · last CVE Apr 11, 2023

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 0Medium 10Low 0

Severity

All severities10 Critical0 High0 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Netweaver AS Abap Business Server Pages to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-29185	6.5	1%	Apr 11	SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a… Affected: 700; 701; 702; 731; 740; 750; +7 more
CVE-2023-24529	6.1	0%	Feb 14	Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs… Affected: 7.00; 7.01; 7.02; 7.31; 7.40; 7.50; +8 more
CVE-2023-24521	6.1	0%	Feb 14	Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated… Affected: 700; 701; 702; 731; 740; 750; +7 more
CVE-2020-6324	6.1	1%	Sep 9	SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the… Affected: 700; 701; 702; 730; 731; 740; +6 more
CVE-2020-6246	6.1	1%	Jun 10	SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode… Affected: 700; 701; 702; 730; 731; 740; +5 more
CVE-2020-6213	6.1	1%	Apr 24	SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site… Affected: 700; 701; 702; 730; 731; 740; +5 more
CVE-2020-6217	6.1	1%	Apr 14	SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled… Affected: 700; 701; 702; 730; 731; 740; +5 more
CVE-2020-6215	6.1	2%	Apr 14	SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a… Affected: 700; 701; 702; 730; 731; 740; +5 more
CVE-2020-6229	6.1	1%	Apr 14	SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not… Affected: 75a; 75b; 75c; 75d; 75e; 700; +10 more
CVE-2020-6205	6.1	1%	Mar 10	SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, 7.51, 7.52, 7.53, 7.54; does not sufficiently… Affected: 7.00; 7.01; 7.02; 7.10; 7.11; 7.30; +7 more