Vulnerabilidades do SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform: 3 registro(s), com versões afetadas e correções.
CVE-2026-58236
Média · 5.5
CWE-78 10/08/2026
OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow the attacker to execute OS-level commands that write to the operating system or stop the SAP system, resulting in no impact on confidentiality, low impact on integrity, and high impact on availability.
CVE-2026-0509
Crítica · 9.6
CWE-862 10/02/2026
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.
CVE-2026-0506
Alta · 8.1
CWE-862 12/01/2026
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines (FORMs) in the ABAP system. Successful exploitation could allow the attacker to write or modify data accessible via FORMs and invoke system functionality exposed via FORMs, resulting in a high impact on integrity and availability, while confidentiality remains unaffected.