Skip to content
SecondTuesday

NetWeaver Application Server for ABAP and ABAP Platform

3 notes since January 2023.

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

Patch DayNoteTitlePriority (derived from CVSS, not SAP’s priority)CVSS
March 20233294595Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform Critical9.6
March 20233296328Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform Medium6.5
February 20233271227An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when … Medium6.1