Vulnerabilidades do SAP SE SAP NetWeaver and ABAP Platform
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SAP SE SAP NetWeaver and ABAP Platform: 3 registro(s), com versões afetadas e correções.
CVE-2026-76963
Média · 4.3
CWE-862 07/09/2026
Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.
CVE-2026-34265
Crítica · 9.8
CWE-787 10/08/2026
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.
CVE-2022-22536
Crítica · 10.0
KEV Urgente · 81 Exploit público CWE-444 09/02/2022
SAP Multiple Products HTTP Request Smuggling Vulnerability
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.