| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver as abap kernel | = 7.22= 7.53= 7.54= 7.77= 7.89= 7.93= 9.16= 9.18= 9.19 | |
| netweaver as abap krnl64nuc | = 7.22= 7.22ext | |
| netweaver as abap krnl64uc | = 7.22= 7.22ext= 7.53 |
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free