Netweaver Development Infrastructure (Sap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2022-06-14. Vendor: Sap.

CVEs of Netweaver Development Infrastructure

• CVE-2022-29618 - CVSS 6.1 (medium), 2022-06-14: Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an…
• CVE-2021-33691 - CVSS 6.9 (medium), 2021-09-15: NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)…
• CVE-2021-33690 - CVSS 9.9 (critical), 2021-09-15: Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11,…
• CVE-2013-6820 - CVSS 9.3 (critical), 2013-11-20: Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers to execute arbitrary code by uploading a…