Content Server (Sap) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2024-08-13. Vendor: Sap.

CVEs of Content Server

• CVE-2024-33005 - CVSS 6.3 (medium), 2024-08-13: Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP…
• CVE-2023-40309 - CVSS 9.8 (critical), 2023-09-12: SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user,…
• CVE-2023-40308 - CVSS 7.5 (high), 2023-09-12: SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library…
• CVE-2023-26457 - CVSS 6.1 (medium), 2023-03-14: SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After…
• CVE-2022-22536 - CVSS 10 (critical), 2022-02-09: SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for…
• CVE-2015-4157 - CVSS 5 (medium), 2015-06-02: SAP Content Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2127995.