[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYZ8fDMk9uYHEpI-UNI4-BwRfIAVJrIR1kDd_okbK46w":3,"g5a-ex:sap\u002Fsap_basis@*":168,"g5a-family:sap\u002Fsap_basis":170},{"success":4,"data":5},true,{"product":6,"versions":64,"topVulnerabilitiesByEpss":86,"kevVulnerabilities":145,"seoMetadata":146,"meta":165},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":63},"sap","sap_basis",21,15,0,"2025-09-09",[14,18,21,23,25,27,29,31,33,35,38,40,42,44,46,49,52,54,57,59,61],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.00",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"700",13,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"701",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"702",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"731",{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},"740",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"750",{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},"751",{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},"752",{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"753",14,{"version":39,"cve_count":37,"kev_count":11,"has_kev":17},"754",{"version":41,"cve_count":20,"kev_count":11,"has_kev":17},"755",{"version":43,"cve_count":20,"kev_count":11,"has_kev":17},"756",{"version":45,"cve_count":20,"kev_count":11,"has_kev":17},"757",{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},"758",12,{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},"795",2,{"version":53,"cve_count":51,"kev_count":11,"has_kev":17},"796",{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},"816",4,{"version":58,"cve_count":51,"kev_count":11,"has_kev":17},"912",{"version":60,"cve_count":51,"kev_count":11,"has_kev":17},"913",{"version":62,"cve_count":51,"kev_count":11,"has_kev":17},"914","Sap Basis by Sap is a technology product with 21 tracked versions and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},{"version":39,"cve_count":37,"kev_count":11,"has_kev":17},{"version":41,"cve_count":20,"kev_count":11,"has_kev":17},{"version":43,"cve_count":20,"kev_count":11,"has_kev":17},{"version":45,"cve_count":20,"kev_count":11,"has_kev":17},{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},{"version":53,"cve_count":51,"kev_count":11,"has_kev":17},{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},{"version":58,"cve_count":51,"kev_count":11,"has_kev":17},{"version":60,"cve_count":51,"kev_count":11,"has_kev":17},{"version":62,"cve_count":51,"kev_count":11,"has_kev":17},[87,95,102,108,115,121,127,131,135,140],{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":94},"CVE-2016-4551","The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621.","2016-10-05",7.5,"v3.0","High",0.01354,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":100,"severity":93,"isKev":17,"epssScore":101},"CVE-2025-0063","SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromise of confidentiality, integrity and availability.","2025-01-14",8.8,"v3.1",0.00745,{"cveId":103,"description":104,"publishedDate":98,"cvssScore":105,"cvssVersion":100,"severity":106,"isKev":17,"epssScore":107},"CVE-2025-0066","Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and availability of an application",9.9,"Critical",0.00579,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":112,"cvssVersion":100,"severity":113,"isKev":17,"epssScore":114},"CVE-2024-34687","SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.\nAn attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, including accessing or deleting files, or stealing session cookies which an attacker could use to hijack a user’s session. Hence, this could have impact on Confidentiality, Integrity and Availability of the system.\n","2024-05-14",6.5,"Medium",0.00402,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":119,"cvssVersion":100,"severity":113,"isKev":17,"epssScore":120},"CVE-2024-34689","WebFlow Services of SAP Business Workflow allows\nan authenticated attacker to enumerate accessible HTTP endpoints in the\ninternal network by specially crafting HTTP requests. On successful\nexploitation this can result in information disclosure. It has no impact on\nintegrity and availability of the application.","2024-07-09",5,0.00353,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":100,"severity":113,"isKev":17,"epssScore":126},"CVE-2025-23193","SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user, potentially revealing sensitive information. This issue does not enable data modification and has no impact on server availability.","2025-02-11",5.3,0.00349,{"cveId":128,"description":129,"publishedDate":98,"cvssScore":125,"cvssVersion":100,"severity":113,"isKev":17,"epssScore":130},"CVE-2025-0053","SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.",0.00337,{"cveId":132,"description":133,"publishedDate":98,"cvssScore":112,"cvssVersion":100,"severity":113,"isKev":17,"epssScore":134},"CVE-2025-0058","In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information that should otherwise be restricted. The attacker does not have the ability to modify the information or to make the information unavailable.",0.00336,{"cveId":136,"description":137,"publishedDate":118,"cvssScore":138,"cvssVersion":100,"severity":113,"isKev":17,"epssScore":139},"CVE-2024-39599","Due to a Protection Mechanism Failure in SAP\nNetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass\nthe configured malware scanner API because of a programming error. This leads\nto a low impact on the application's confidentiality, integrity, and\navailability.",4.7,0.00306,{"cveId":141,"description":142,"publishedDate":118,"cvssScore":143,"cvssVersion":100,"severity":113,"isKev":17,"epssScore":144},"CVE-2024-37180","Under certain conditions SAP NetWeaver\nApplication Server for ABAP and ABAP Platform allows an attacker to access\nremote-enabled function module with no further authorization which would\notherwise be restricted, the function can be used to read non-sensitive\ninformation with low impact on confidentiality of the application.",4.1,0.00302,[],{"title":147,"metaDescription":148,"keywords":149,"structuredData":150},"Sap Basis by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sap Basis by Sap covering 21 versions with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sap Basis vulnerabilities, Sap Basis security, Sap Basis CVE, Sap Sap Basis, Sap Basis threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":151,"@type":152,"name":153,"description":148,"url":154,"manufacturer":155,"applicationCategory":159,"softwareVersion":160,"mainEntity":161},"https:\u002F\u002Fschema.org","SoftwareApplication","Sap Basis","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fsap_basis",{"@type":156,"name":157,"url":158},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","21 versions tracked",{"@type":162,"name":163,"description":164,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sap Basis Security Vulnerabilities","Security vulnerabilities affecting Sap Basis by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":166,"apiVersion":167},"2026-10-18T22:11:21.429Z","3.0",{"rows":169,"total":11,"capped":17,"failed":11},[],[171,173],{"product":172,"cves":51},"sap_basis_component_640",{"product":174,"cves":51},"sap_basis_component_700"]