Abap Platform
Vendor:
First CVE: Feb 12, 2020 · Active for 6 years
12
Total CVEs
More Total CVEs than 90% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
5.9
Avg CVSS
Higher Avg CVSS than 18% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Abap Platform over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 12, 2020
6 years ago
Most Recent CVE
Mar 12, 2024
864 days ago
CVE Severity & Scoring
Abap Platform12 CVEs
8%
58%
25%
8%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network12 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (83.3%)
Unknown0 (0.0%)
Required2 (16.7%)
Privileges Required
Low5 (41.7%)
High4 (33.3%)
None3 (25.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-44231CRITICAL Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application. | Dec 14, 2021 | 9.8 | 30 | NO | NO |
CVE-2024-22131HIGH In SAP ABA (Application Basis) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75I, an attacker authenticated as a user with a remote execution authorization can use a vuln | Feb 13, 2024 | 7.2 | 24 | NO | NO |
CVE-2020-6318HIGH A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit thes | Sep 9, 2020 | 7.2 | 22 | NO | NO |
CVE-2020-6296HIGH SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to inject code that can be executed by the | Aug 12, 2020 | 8.8 | 22 | NO | NO |
CVE-2023-29110MEDIUM The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. | Apr 11, 2023 | 5.4 | 19 | NO | NO |
CVE-2023-29109MEDIUM The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel formula | Apr 11, 2023 | 4.6 | 18 | NO | NO |
CVE-2023-25615MEDIUM Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user | Mar 14, 2023 | 4.9 | 18 | NO | NO |
CVE-2020-6310MEDIUM Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to | Aug 12, 2020 | 4.3 | 18 | NO | NO |
CVE-2020-6181MEDIUM Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), | Feb 12, 2020 | 5.8 | 18 | NO | NO |
CVE-2024-27900MEDIUM Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to priv | Mar 12, 2024 | 5.3 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Abap Platform
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 804 | 1 | 9.8 | 1.3% | 0 | 0 |
| 795 | 1 | 5.3 | 0.4% | 0 | 0 |
| 791 | 1 | 4.9 | 0.5% | 0 | 0 |
| 75i | 1 | 7.2 | 1.1% | 0 | 0 |
| 75e | 2 | 5.0 | 0.3% | 0 | 0 |
| 75d | 2 | 5.0 | 0.3% | 0 | 0 |
| 75c | 3 | 5.7 | 0.6% | 0 | 0 |
| 758 | 1 | 5.3 | 0.4% | 0 | 0 |
| 757 | 1 | 4.9 | 0.5% | 0 | 0 |
| 756 | 2 | 7.3 | 0.9% | 0 | 0 |
| 755 | 5 | 6.9 | 2.0% | 0 | 0 |
| 7.54 | 1 | 5.8 | 0.8% | 0 | 0 |
| 754 | 4 | 6.5 | 2.1% | 0 | 0 |
| 7.53 | 1 | 5.8 | 0.8% | 0 | 0 |
| 753 | 6 | 6.5 | 1.8% | 0 | 0 |
| 7.52 | 1 | 5.8 | 0.8% | 0 | 0 |
| 752 | 2 | 8.5 | 1.2% | 0 | 0 |
| 7.51 | 1 | 5.8 | 0.8% | 0 | 0 |
| 751 | 7 | 6.6 | 1.7% | 0 | 0 |
| 7.50 | 3 | 4.3 | 0.9% | 0 | 0 |