Netweaver Java Application Server (Sap) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2015-06-02. Vendor: Sap.

CVEs of Netweaver Java Application Server

• CVE-2015-4158 - CVSS 5 (medium), 2015-06-02: SAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2121661.
• CVE-2015-2282 - CVSS 7.5 (high), 2015-06-02: Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6,…
• CVE-2015-2278 - CVSS 5 (medium), 2015-06-02: The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP,…
• CVE-2014-8590 - CVSS 4.3 (medium), 2014-11-04: XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary…
• CVE-2014-3133 - CVSS 5 (medium), 2014-04-30: SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD…