Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3027▼ 69 respecto a la semana anterior
Críticas / altas1424▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.6% | — | SAP Advanced Business Application Programming Platform KernelSAP Advanced Business Application Programming Platform Krnl32nucSAP Advanced Business Application Programming Platform Krnl32ucSAP Advanced Business Application Programming Platform Krnl64nuc+1 | 12/6/2019 | 17/6/2026 | FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or… | |
| Modificada | Alta (8.8) | 1.4% | — | SAP Advanced Business Application Programming Platform KernelSAP Advanced Business Application Programming Platform Krnl32nucSAP Advanced Business Application Programming Platform Krnl32ucSAP Advanced Business Application Programming Platform Krnl64nuc+1 | 12/3/2019 | 17/6/2026 | ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT,… | |
| Modificada | Media (4.9) | 2.1% | — | SAP Advanced Business Application Programming Platform KernelSAP Advanced Business Application Programming Platform Krnl32nucSAP Advanced Business Application Programming Platform Krnl32ucSAP Advanced Business Application Programming Platform Krnl64nuc+1 | 15/2/2019 | 17/6/2026 | SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT,… | |
| Modificada | Alta (8.1) | 1.7% | — | SAP Advanced Business Application Programming Platform KernelSAP Advanced Business Application Programming Platform Krnl64nucSAP Advanced Business Application Programming Platform Krnl64uc | 15/2/2019 | 17/6/2026 | SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The situation can be… |