SAP NetWeaver Application Server ABAP and ABAP Platform vulnerabilities
5 known vulnerabilities in SAP NetWeaver Application Server ABAP and ABAP Platform from SAP. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.6 Critical severity
SAP NetWeaver Application Server ABAP and ABAP…: Missing Authorization
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availa
- 8.1 High severity
SAP NetWeaver Application Server ABAP and ABAP…: Missing Authorization
Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines (FORMs) in the ABAP system. Successful exploitation could allow the attacker to wri
- 9.6 Critical severity
SAP NetWeaver Application Server ABAP and ABAP…: Unrestricted Upload of File with Dangerous Type
An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system.
- 9.4 Critical severity
SAP NetWeaver Application Server ABAP and ABAP…: Improper Neutralization of Special Elements used in an SQL Command
SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to write data to a database table. By doi
- 8.7 High severity
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform…
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker