Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2860▼ 165 respecto a la semana anterior
Críticas / altas1382▲ 50 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaBaja (3.1)0.25%—SAP Netweaver AS Abap KernelSAP Netweaver AS Abap Krnl64nucSAP Netweaver AS Abap Krnl64uc10/2/202617/6/2026
Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory corruption and the…
AnalizadaCrítica (9.6)0.36%—SAP Netweaver AS Abap KernelSAP Netweaver AS Abap Krnl64nucSAP Netweaver AS Abap Krnl64uc10/2/202617/6/2026
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the…
ModificadaAlta (7.5)0.96%—SAP Netweaver AS Abap KernelSAP Netweaver AS Abap Krnl64nucSAP Netweaver AS Abap Krnl64uc11/5/202217/6/2026
SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption.
ModificadaMedia (6.1)0.57%—SAP Netweaver AS Abap KernelSAP Netweaver AS Abap Krnl64ucSAP Webdispatcher11/5/202217/6/2026
The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.