Netweaver_application_server_abap

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	76

Date	Id	Summary	Products	Score	Patch	Annotated
2022-09-13	CVE-2022-39799	An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.	Netweaver_application_server_abap	6.1
2022-02-09	CVE-2022-22536	SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of...	Content_server, Netweaver_application_server_abap, Web_dispatcher	10.0