SAP Basis vulnerabilities
5 known vulnerabilities in SAP Basis from SAP. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
SAP NetWeaver AS ABAP and ABAP Platform: Improper Verification of Cryptographic Signature
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity informat
- 7.5 High severity
SAP NetWeaver Server ABAP: Observable Response Discrepancy
SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user, potentially revealing sensitive information. This issue does not enable data modif
- 8.8 High severity
SAP NetWeaver AS for ABAP and ABAP Platform…: Incorrect Permission Assignment for Critical Resource
Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and a
- 8.8 High severity
SAP NetWeaver AS ABAP and ABAP Platform: Improper Neutralization of Special Elements used in an SQL Command
SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromis
- 9.0 Critical severity
SAP NetWeaver Application server for ABAP and…: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker can control code that is executed within a user’s browser, which could result in m