Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in an attacker can use inappropriate path names containing malicious server names in the import/export of sessions functionality and coerce the web server into authenticating with the malicious server. Furthermore, if NTLM is setup the attacker can compromise confidentiality, integrity and availability of the SAP database.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP NetWeaver AS ABAP 代码问题漏洞
Vulnerability Description
SAP Netweaver是德国思爱普（SAP）公司的一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。ABAP是一款运行于NetWeaver中且基于ABAP高级编程语言的应用服务器。 SAP Netweaver AS ABAP中存在安全漏洞。攻击者可借助特制路径名利用该漏洞影响SAP数据库的保密性、完整性和可用性。以下产品及版本受到影响：SAP Netweaver AS ABAP 700版本， 701版本， 702版本， 710版本， 711版本， 730版本， 731版本，
CVSS Information
N/A
Vulnerability Type
N/A