Veille CVE

Recherche « SAP_SE SAP ABAP Platform »

8 CVE

Critique 1 Élevée 2 Moyenne 5 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « SAP_SE SAP ABAP Platform » ✕
  1. CVE-2026-89120 7.1 Élevée

    SAP_SE SAP ABAP Platform

    A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.

  2. CVE-2026-76963 4.3 Moyenne

    SAP_SE SAP NetWeaver and ABAP Platform

    Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.

  3. CVE-2026-66767 7.7 Élevée

    SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform

    SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session under narrow timing conditions. Successful exploitation could result in high impact on confidentiality and integrity, with low impact on availability of the application.

  4. CVE-2026-58247 5.3 Moyenne

    SAP_SE SAP ABAP Platform

    SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application.

  5. CVE-2026-58241 4.2 Moyenne

    SAP_SE SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard

    SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized modifications could result in processing delays and operational disruption, leading to a low impact on the integrity and availability of the application with no impact on confidentiality.

  6. CVE-2026-58236 5.5 Moyenne

    SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform

    SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow the attacker to execute OS-level commands that write to the operating system or stop the SAP system, resulting in no impact on confidentiality, low impact on integrity, and high impact on availability.

  7. CVE-2026-34265 9.8 Critique

    SAP_SE SAP NetWeaver and ABAP Platform

    SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.

  8. CVE-2026-58246 4.3 Moyenne

    SAP_SE SAP NetWeaver Application Server for ABAP

    SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate users during their validity period. This leads to high impact on confidentiality. Integrity and availability are not impacted.