ABAP
This article covers ABAP support and vulnerability detection for Mend SAST.
Mend SAST-supported ABAP file types
File Type |
|---|
.abap |
.bsp |
Mend SAST-supported ABAP frameworks
Framework |
|---|
BSP |
Mend SAST-supported ABAP vulnerability types
The ABAP vulnerability types detected by SAST are provided below, organized by CWE ID within each of their identified severities.
ABAP high-severity vulnerability types
CWE | Vulnerability Type |
CWE-22 | Path/Directory Traversal |
CWE-78 | Command Injection |
CWE-79 | Cross-Site Scripting |
CWE-89 | SQL Injection |
CWE-94 | Code Injection |
ABAP medium-severity vulnerability types
CWE | Vulnerability Type |
CWE-400 | Regex Denial of Service (ReDoS) |