Known vulnerabilities in SAP NetWeaver AS ABAP - page 3

Vendor: SAP
Software: SAP NetWeaver AS ABAP
Software CPE: cpe:2.3:a:sap:sap_netweaver_as_abap:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 71
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP NetWeaver AS ABAP SAP NetWeaver AS ABAP is affected by 71 known vulnerabilities: 3 critical, 4 high, 30 medium, 34 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102589 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0053		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011427
#VU102588 - Missing Authorization
CVE-2025-0068		 CWE-862 Low
No
No
 - 14.01.2025 SB2025011427
#VU102587 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-0063		 CWE-89 Medium
No
No
 - 14.01.2025 SB2025011427
#VU102586 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0066		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011427
#VU102585 - Improper Authentication
CVE-2025-0070		 CWE-287 Medium
No
No
 - 14.01.2025 SB2025011427
#VU101374 - Missing Authorization
CVE-2024-47585		 CWE-862 Low
No
No
 - 10.12.2024 SB2024121007
#VU101372 - Exposure of sensitive information to an unauthorized actor
CVE-2024-54198		 CWE-200 Medium
No
No
 - 10.12.2024 SB2024121006
#VU100243 - Exposure of sensitive information to an unauthorized actor
CVE-2024-47593		 CWE-200 Medium
No
No
 - 12.11.2024 SB2024111252
#VU100242 - NULL Pointer Dereference
CVE-2024-47586		 CWE-476 Medium
No
No
 - 12.11.2024 SB2024111252
#VU98127 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37180		 CWE-200 Low
No
No
 - 08.10.2024 SB2024100817
#VU96981 - Missing Authorization
CVE-2024-44114		 CWE-862 Low
No
No
 - 10.09.2024 SB2024091012
#VU96980 - Missing Authorization
CVE-2024-41728		 CWE-862 Low
No
No
 - 10.09.2024 SB2024091012
#VU96974 - Improper input validation
CVE-2024-42371		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96975 - Improper input validation
CVE-2024-44117		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96976 - Improper input validation
CVE-2024-45285		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96977 - Improper input validation
CVE-2024-42380		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96978 - Improper input validation
CVE-2024-44115		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96979 - Improper input validation
CVE-2024-44116		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96973 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45279		 CWE-79 Low
No
No
 - 10.09.2024 SB2024091012
#VU83339 - Exposure of sensitive information to an unauthorized actor
CVE-2023-41366		 CWE-200 Medium
No
No
 - 21.11.2023 SB2023112119


Showing elements 41 - 60 out of 71