Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)
SAP NetWeaver
23 nota sejak Januari 2023.
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
| Hari Tampalan | Nota | Tajuk | Keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP) | CVSS |
|---|---|---|---|---|
| September 2026 | 3759472 | Missing Authentication check in SAP NetWeaver (Message Server) | Kritikal | 9.8 |
| September 2026 | 3781729 | Improper Access Control in SAP NetWeaver (SAP GUI for Java) | Kritikal | 9.0 |
| Mac 2026 | 3697355 | SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification) | Sederhana | 6.4 |
| Februari 2026 | 3687285 | Insecure Deserialization vulnerability in SAP NetWeaver (JMS service) | Sederhana | 4.4 |
| Disember 2025 | 3640185 | Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius) | Tinggi | 7.9 |
| September 2025 | 3670067 | Insecure Deserialization vulnerability in SAP Netweaver (RMI-P4) | Kritikal | 10.0 |
| September 2025 | 3627373 | Missing Authentication check in SAP NetWeaver | Kritikal | 9.1 |
| September 2025 | 3627644 | Missing Authorization check in SAP NetWeaver (Service Data Download) | Sederhana | 5.0 |
| Julai 2025 | 3610892 | Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service) | Kritikal | 9.1 |
| Julai 2025 | 3621037 | Missing Authorization check in SAP NetWeaver (RFC enabled function module) | Sederhana | 5.0 |
| Jun 2025 | 3590887 | Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation) | Sederhana | 5.8 |
| Mei 2025 | 3604119 | Insecure Deserialization in SAP NetWeaver (Visual Composer development server) Diketahui dieksploitasi | Kritikal | 9.1 |
| April 2025 | 3594142 | Missing Authorization check in SAP NetWeaver (Visual Composer development server) Diketahui dieksploitasi | Kritikal | 10.0 |
| April 2025 | 3577131 | Authorization Bypass vulnerability in SAP NetWeaver | Sederhana | 4.3 |
| Mac 2025 | 3563927 | Missing Authorization check in SAP NetWeaver (ABAP Class Builder) | Tinggi | 8.8 |
| April 2024 | 3425188 | Server-Side Request Forgery in SAP NetWeaver | Sederhana | 5.3 |
| Mac 2024 | 3428847 | Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal) | Sederhana | 5.3 |
| Januari 2024 | 3392626 | Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager | Sederhana | 4.1 |
| September 2023 | 3348142 | Missing Authentication check in SAP NetWeaver (Guided Procedures) | Sederhana | 5.3 |
| Julai 2023 | 3331376 | Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON) | Tinggi | 8.7 |
| Jun 2023 | 3318657 | Cross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository) | Sederhana | 6.4 |
| Jun 2023 | 3325642 | Denial of Service in SAP NetWeaver | Rendah | 2.7 |
| Mac 2023 | 3274920 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver | Sederhana | 6.1 |