Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)
SAP NetWeaver AS ABAP / ABAP Platform
87 nota sejak Januari 2023.
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
| Hari Tampalan | Nota | Tajuk | Keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP) | CVSS |
|---|---|---|---|---|
| Oktober 2026 | 3671819 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) | Sederhana | 5.4 |
| September 2026 | 3757002 | Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Tinggi | 7.7 |
| September 2026 | 3772838 | Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform | Sederhana | 4.3 |
| Ogos 2026 | 3714806 | Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform | Kritikal | 9.8 |
| Ogos 2026 | 3721424 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP | Sederhana | 6.3 |
| Ogos 2026 | 3745182 | OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | Sederhana | 5.5 |
| Ogos 2026 | 3752864 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) | Sederhana | 4.2 |
| Julai 2026 | 3747367 | Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP | Kritikal | 9.9 |
| Julai 2026 | 3754659 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) | Sederhana | 4.7 |
| Julai 2026 | 3413033 | Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 4.3 |
| Jun 2026 | 3746332 | XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform | Kritikal | 9.9 |
| Jun 2026 | 3717897 | Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | Kritikal | 9.8 |
| Jun 2026 | 3735546 | Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform | Tinggi | 7.1 |
| Mei 2026 | 3730019 | OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 6.5 |
| Mei 2026 | 3728690 | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) | Sederhana | 4.7 |
| Mei 2026 | 3665042 | CSS Injection vulnerability in SAP NetWeaver Application Server ABAP | Rendah | 3.1 |
| April 2026 | 3692004 | Open Redirect vulnerability in SAP NetWeaver Application Server ABAP | Sederhana | 6.1 |
| Mac 2026 | 3689080 | Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP | Sederhana | 6.4 |
| Mac 2026 | 3703856 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Sederhana | 6.4 |
| Mac 2026 | 3704740 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Sederhana | 5.0 |
| Mac 2026 | 3694383 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Rendah | 3.5 |
| Februari 2026 | 3674774 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform | Kritikal | 9.6 |
| Februari 2026 | 3697567 | XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform | Tinggi | 8.8 |
| Februari 2026 | 3678313 | Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) | Rendah | 3.1 |
| Januari 2026 | 3688703 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform | Tinggi | 8.1 |
| November 2025 | 3643337 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Sederhana | 4.3 |
| November 2025 | 3634053 | Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) | Rendah | 2.7 |
| Oktober 2025 | 3642021 | Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP | Sederhana | 5.4 |
| Oktober 2025 | 3627308 | Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform | Sederhana | 5.3 |
| September 2025 | 3629325 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform | Sederhana | 6.1 |
| September 2025 | 3623504 | Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing) | Sederhana | 4.3 |
| Ogos 2025 | 3611184 | Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) | Tinggi | 8.1 |
| Ogos 2025 | 3585491 | HTML Injection vulnerability in SAP NetWeaver Application Server ABAP | Sederhana | 6.1 |
| Ogos 2025 | 3597355 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP | Sederhana | 6.1 |
| Ogos 2025 | 3629871 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform | Sederhana | 6.1 |
| Ogos 2025 | 3602656 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Sederhana | 5.4 |
| Ogos 2025 | 3601480 | Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) | Sederhana | 4.1 |
| Julai 2025 | 3600846 | Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476 | Tinggi | 8.1 |
| Julai 2025 | 3623440 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Tinggi | 8.1 |
| Julai 2025 | 3596987 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | Sederhana | 6.1 |
| Julai 2025 | 3617131 | Multiple vulnerabilities in SAP NetWeaver Application Server ABAP | Sederhana | 6.1 |
| Julai 2025 | 3610322 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Sederhana | 4.9 |
| Julai 2025 | 3610056 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) | Sederhana | 4.3 |
| Julai 2025 | 3626440 | Missing Authorization check in SAP NetWeaver and ABAP Platform | Sederhana | 4.3 |
| Jun 2025 | 3600840 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | Kritikal | 9.6 |
| Mei 2025 | 3577287 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | Sederhana | 6.2 |
| April 2025 | 3554667 | Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | Tinggi | 8.5 |
| April 2025 | 3581811 | Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection) | Tinggi | 7.7 |
| April 2025 | 3559307 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) | Sederhana | 4.7 |
| April 2025 | 3568778 | Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface) | Sederhana | 4.3 |
| April 2025 | 3565944 | Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) | Sederhana | 4.1 |
| Mac 2025 | 3552824 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) | Sederhana | 6.1 |
| Mac 2025 | 3562390 | Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP | Sederhana | 6.1 |
| Februari 2025 | 3546470 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) | Sederhana | 5.3 |
| Februari 2025 | 3561264 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP | Sederhana | 5.3 |
| Februari 2025 | 3547581 | Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI) | Sederhana | 4.3 |
| Januari 2025 | 3537476 | Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform | Kritikal | 9.9 |
| Januari 2025 | 3550708 | Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) | Kritikal | 9.9 |
| Januari 2025 | 3550816 | SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | Tinggi | 8.8 |
| Januari 2025 | 3503138 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) | Sederhana | 6.0 |
| Januari 2025 | 3536461 | Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 5.3 |
| Januari 2025 | 3550674 | Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | Sederhana | 4.3 |
| Disember 2024 | 3469791 | Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | Tinggi | 8.5 |
| Disember 2024 | 3536361 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 4.3 |
| November 2024 | 3504390 | NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 5.3 |
| November 2024 | 3508947 | Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 4.3 |
| September 2024 | 3501359 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel) | Sederhana | 6.1 |
| September 2024 | 3488039 | Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 5.4 |
| September 2024 | 3496410 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | Rendah | 2.7 |
| September 2024 | 3507252 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | Rendah | 2.0 |
| Ogos 2024 | 3468102 | Improper Access Control in SAP Netweaver Application Server ABAP | Sederhana | 4.7 |
| Ogos 2024 | 3494349 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform | Sederhana | 4.3 |
| Julai 2024 | 3456952 | Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 4.7 |
| Julai 2024 | 3454858 | Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Sederhana | 4.1 |
| Jun 2024 | 3453170 | Denial of service (DOS) in SAP NetWeaver and ABAP platform | Sederhana | 6.5 |
| Mei 2024 | 3448171 | File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | Kritikal | 9.6 |
| Mei 2024 | 3448445 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform | Sederhana | 6.5 |
| Mei 2024 | 3450286 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | Sederhana | 6.1 |
| April 2024 | 3359778 | Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform | Sederhana | 6.5 |
| Februari 2024 | 3360827 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel) | Sederhana | 5.3 |
| Januari 2024 | 3387737 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform | Sederhana | 4.1 |
| Disember 2023 | 3392547 | SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | Sederhana | 4.1 |
| November 2023 | 3362849 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | Sederhana | 5.3 |
| September 2023 | 3323163 | Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering) | Sederhana | 5.5 |
| Ogos 2023 | 3348000 | Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform | Sederhana | 4.9 |
| Julai 2023 | 3318850 | Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform | Sederhana | 6.0 |
| Februari 2023 | 3293786 | Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to send a crafte… | Sederhana | 6.1 |