NetWeaver AS for ABAP and ABAP Platform vulnerabilities

2 known vulnerabilities in NetWeaver AS for ABAP and ABAP Platform from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  NetWeaver AS for ABAP and ABAP Platform: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-27501Mar 14, 2023SAP

  SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw

• 7.4 High severity

  NetWeaver AS for ABAP and ABAP Platform: Server-Side Request Forgery

  CVE-2023-26459Mar 14, 2023SAP

  Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the app