Filtered by vendor Sap Subscriptions
Filtered by product Sap Netweaver And Abap Platform Subscriptions

Search

Switch to Advanced Search (Beta)
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-76965 2 Sap, Sap Se 2 Sap Netweaver And Abap Platform, Sap Netweaver And Abap Platform 2026-11-10 9.9 Critical
SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system.
CVE-2026-76966 2 Sap, Sap Se 2 Sap Netweaver And Abap Platform, Sap Netweaver And Abap Platform 2026-11-10 8.9 High
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on confidentiality and integrity with low impact on availability of the application.
CVE-2026-76970 2 Sap, Sap Se 2 Sap Netweaver And Abap Platform, Sap Netweaver And Abap Platform 2026-11-10 7.5 High
Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted requests to the application. If processed by the application, these requests could trigger a memory corruption condition in the parsing routine, which could cause the affected processes to crash and restart. By repeatedly sending such requests, the attacker could cause a sustained denial of service, leading to a high impact on availability. Confidentiality and integrity remain unaffected.