Skip to content
OpenAdvisories

Product · SAP

SAP NetWeaver Application Server ABAP

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-23186

    Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP

    In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be…

    SAP SAP NetWeaver Application Server ABAP
  • High 8.5
    CVE-2024-54198

    Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP

    In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be…

    SAP SAP NetWeaver Application Server ABAP