NetWeaver AS for ABAP and ABAP Platform
自 2023 年 1 月以来共 6 条安全说明。
优先级依据 CVSS 推算,并非 SAP 的优先级:CVSS 9.0 及以上为严重,7.0 及以上为高,4.0 及以上为中,低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me(需要 SAP 登录)。
| 补丁日 | 编号 | 标题 | 优先级(依据 CVSS 推算,并非 SAP 的优先级) | CVSS |
|---|---|---|---|---|
| 2023年4月 | 3296378 | Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform | 中 | 6.5 |
| 2023年3月 | 3302162 | Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 严重 | 9.6 |
| 2023年3月 | 3294954 | Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 高 | 8.7 |
| 2023年3月 | 3296346 | Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 高 | 7.4 |
| 2023年2月 | 3268959 | SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a malicious link, which when clicked by an un… | 中 | 6.1 |
| 2023年1月 | 3283283 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 中 | 6.1 |