Sap Netweaver الثغرات

التسلسل الزمني

السنة السابقة

النسخة

7.50103
7.3087
7.4081
7.3180
7.2058

معالجة

Official Fix218
Temporary Fix0
Workaround2
Unavailable1
Not Defined187

قابلية الاستغلال

High9
Functional0
Proof-of-Concept62
Unproven20
Not Defined317

متجه الوصول

Not Defined0
Physical1
Local4
Adjacent27
Network376

توثيق

Not Defined0
High45
Low118
None245

تفاعل المستخدم

Not Defined0
Required108
None300

C3BM Index

السنة السابقة

CVSSv3 Base

≤10
≤20
≤33
≤423
≤578
≤6127
≤766
≤861
≤923
≤1027

CVSSv3 Temp

≤10
≤20
≤33
≤431
≤596
≤6117
≤763
≤854
≤936
≤108

VulDB

≤10
≤21
≤310
≤441
≤5106
≤688
≤761
≤869
≤96
≤1026

NVD

≤10
≤20
≤31
≤41
≤519
≤624
≤745
≤832
≤918
≤1030

CNA

≤10
≤20
≤31
≤42
≤510
≤622
≤727
≤81
≤910
≤1013

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k1
<2k1
<5k27
<10k164
<25k184
<50k30
<100k0
≥100k1

إكسبلويت اليوم

<1k193
<2k45
<5k75
<10k81
<25k14
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

السنة السابقة

🔴 CTI النشاطات

Affected Versions (194): 2.0 SP5, 3.0, 4.0, 5.555.38, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10, 6.11, 6.12, 6.13, 6.14, 6.15, 6.16, 6.17, 6.18, 6.19, 6.20, 6.21, 6.22, 6.23, 6.24, 6.25, 6.26, 6.27, 6.28, 6.29, 6.30, 6.31, 6.32, 6.33, 6.34, 6.35, 6.36, 6.37, 6.38, 6.39, 6.40, 7.0, 7.0 EHP2, 7.0.573, 7.00, 7.01, 7.02, 7.03, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.10, 7.11, 7.12, 7.13, 7.14, 7.15, 7.16, 7.17, 7.18, 7.19, 7.20, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.23, 7.24, 7.25, 7.26, 7.27, 7.28, 7.29, 7.30, 7.30 (Basis 720 SP 0, 7.31, 7.31. 7.4, 7.31.201109172004, 7.32, 7.33, 7.34, 7.35, 7.36, 7.37, 7.38, 7.39, 7.40, 7.40 SP12, 7.41, 7.42, 7.43, 7.44, 7.45, 7.46, 7.47, 7.48, 7.49, 7.50, 7.50The, 7.51, 7.52, 7.53, 7.54, 7.70, 7.70 BYD, 7.70 PI, 7.73, 7.74, 7.75, 7.77, 7.81, 7.82, 7.83, 7.84, 7.85, 7.86, 7.87, 7.88, 7.89, 7.91, 7.92, 7.93, 7.94, 8.04, 75A, 75B, 75C, 75D, 75E, 600, 602, 603, 604, 605, 606, 617, 618, 700, 701, 702, 707, 710, 710.750, 711, 720, 730, 731, 737, 740, 747, 750, 751, 752, 753, 754, 755, 756, 757, 758, 782, 784, 786, 787, 789, 790, 791, 793, 794, 800, 802, 803, 804, 805, 806, 807, 2004s, 7400.12.21.30308, <=700, Kernel 720 patch 68), SAP_BASIS 700, SAP_BASIS731, SAP_BASIS740, SAP_BASIS750, Sp8

Link to Product Website: https://www.sap.com

نوع البرنامج: Solution Stack Software

منشورBaseTempالثغرة0dayاليومق�معالجةCTICVE
09/04/20246.56.3SAP NetWeaver AS ABAP and ABAP Platform الحرمان من الخدمة$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-30218
09/04/20247.57.4SAP NetWeaver AS Java User Management Engine User Admin Application تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-27899
09/04/20245.35.2SAP NetWeaver تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-27898
12/03/20245.35.2SAP NetWeaver Enterprise Portal الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-25645
12/03/20244.44.4SAP NetWeaver AS ABAP WebGUI سكربتات مشتركة$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-27902
12/03/20245.35.2SAP NetWeaver WSRM الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-25644
12/03/20248.18.0SAP NetWeaver AS Java Administrator Log Viewer Plug-In تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2024-22127
12/03/20245.35.2SAP NetWeaver Process Integration Support Web Pages الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedOfficial Fix0.08CVE-2024-28163
13/02/20244.54.4SAP NetWeaver Business Client for HTML سكربتات مشتركة$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-22128
13/02/20246.56.4SAP NetWeaver AS Java User Admin Application سكربتات مشتركة$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-22126
13/02/20245.35.2SAP NetWeaver Application Server ABAP Kernel الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedOfficial Fix0.08CVE-2024-24740
13/02/20246.96.8SAP NetWeaver AS Java Guided Procedures XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-24743
09/01/20244.54.5SAP NetWeaver Internet Communication Manager الكشف عن المعلومات$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-22124
09/01/20244.34.3SAP NetWeaver ABAP Application Server and ABAP Platform سكربتات مشتركة$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-21738
12/12/20235.95.8SAP NetWeaver Application Server ABAP and ABAP Platform GUI تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-49581
14/11/20234.54.4SAP NetWeaver AS Java Logon Application الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-42480
14/11/20235.35.2SAP NetWeaver Application Server ABAP/ABAP Platform Restrictions الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-41366
10/10/20236.96.8SAP NetWeaver AS Java GRMG Heartbeat Application تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-42477
12/09/20238.58.4SAP CommonCryptoLib تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-40309
12/09/20235.35.2SAP NetWeaver Guided Procedures توثيق ضعيف$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-41367
12/09/20234.84.8SAP NetWeaver AS ABAP Unified Rendering سكربتات مشتركة$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-40624
08/08/20235.25.1SAP NetWeaver Process Integration سكربتات مشتركة$5k-$25k$0-$5kNot DefinedOfficial Fix0.01CVE-2023-37488
08/08/20234.74.7SAP NetWeaver Application Server ABAP/ABAP Platform تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-37492
11/07/20237.27.1SAP NetWeaver BI CONT Add-On اجتياز الدليل$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-33989
11/07/20235.95.8SAP NetWeaver AS for Java Request تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-31405

383 بعض الادخالات لم يتم عرضها

المزيد من الادخالات بحسب Sap

Interested in the pricing of exploits?

See the underground prices here!