NetWeaver AS for ABAP and ABAP Platform
6 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| April 2023 | 3296378 | Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform | Medium | 6.5 |
| March 2023 | 3302162 | Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | Critical | 9.6 |
| March 2023 | 3294954 | Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | High | 8.7 |
| March 2023 | 3296346 | Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | High | 7.4 |
| February 2023 | 3268959 | SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a malicious link, which when clicked by an un… | Medium | 6.1 |
| January 2023 | 3283283 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | Medium | 6.1 |