SAP NetWeaver As Abap vulnerabilities

12 CVEs affecting SAP NetWeaver As Abap, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-27902, published 2024-03-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-27668, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and…
CVE-2021-27632, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -…
CVE-2021-27631, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -…
CVE-2021-27630, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -…
CVE-2021-27629, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -…
CVE-2021-27628, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73,…
CVE-2021-27607, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73,…
CVE-2021-27606, published 2021-06-09. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL -…
CVE-2019-0257, published 2019-02-15. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary…
CVE-2022-22543, published 2022-02-09. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53,…

Latest

CVE-2024-27902, published 2024-03-12. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A…