Known vulnerabilities in SAP NetWeaver AS ABAP - page 4

Vendor: SAP

Software: SAP NetWeaver AS ABAP

Software CPE: cpe:2.3:a:sap:sap_netweaver_as_abap:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 71

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (71)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU80720 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40624	CWE-79	Low	No	No	-	13.09.2023	SB2023091315
#VU80691 - Memory corruption CVE-2023-40308	CWE-119	Medium	No	No	-	12.09.2023	SB2023091261 SB2023092234 SB2023092235 and 5 more
#VU80681 - Improper Authentication CVE-2023-40309	CWE-287	High	No	No	-	12.09.2023	SB2023091261 SB2023092234 SB2023092235 and 5 more
#VU79277 - Missing Authorization CVE-2023-37492	CWE-862	Low	No	No	-	09.08.2023	SB2023080922
#VU78958 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22536	CWE-444	Critical	Available	Exploited	-	04.08.2023	SB2022021025
#VU78829 - Improper Authentication CVE-2023-35874	CWE-287	Medium	No	No	-	01.08.2023	SB2023080124
#VU75133 - Resource exhaustion CVE-2023-29185	CWE-400	Low	No	No	-	14.04.2023	SB2023041424
#VU75132 - Resource exhaustion CVE-2023-28763	CWE-400	Medium	No	No	-	14.04.2023	SB2023041424
#VU75120 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-27269	CWE-22	Medium	No	No	-	14.04.2023	SB2023041424
#VU58017 - Permissions, Privileges, and Access Controls CVE-2021-40504	CWE-264	Low	No	No	-	09.11.2021	SB2021110904
#VU53061 - Improper Control of Generation of Code ('Code Injection') CVE-2021-27611	CWE-94	Medium	No	No	-	11.05.2021	SB2021051104

Showing elements 61 - 80 out of 71