CVE-2024-41728

概要

参考情報

• me.sap.com/notes/3496410 · Permissions Required
• url.sap/sapsecuritypatchday · Patch

netweaver application server abap のその他の脆弱性

• CVE-2026-27680中 4.3Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading…
• CVE-2026-40135中 6.5An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated…
• CVE-2026-27682中 6.1Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server …
• CVE-2026-34257中 6.1Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, …
• CVE-2026-27688中 5.0Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read…