SAP NetWeaver AS ABAP and ABAP Platform vulnerabilities
6 known vulnerabilities in SAP NetWeaver AS ABAP and ABAP Platform from SAP. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
SAP NetWeaver AS ABAP and ABAP Platform: Missing Authorization
Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. Th
- 9.9 Critical severity
SAP NetWeaver AS ABAP and ABAP Platform: Improper Verification of Cryptographic Signature
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity informat
- 9.8 Critical severity
SAP NetWeaver AS ABAP and ABAP Platform: Stack-based Buffer Overflow
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory co
- 8.8 High severity
SAP NetWeaver AS ABAP and ABAP Platform: Improper Verification of Cryptographic Signature
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity informat
- 8.8 High severity
SAP NetWeaver AS ABAP and ABAP Platform: Improper Neutralization of Special Elements used in an SQL Command
SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromis
- 7.4 High severity
SAP NetWeaver AS ABAP and ABAP Platform: Missing Authentication for Critical Functionality
SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNE