Sap Netweaver As Java (Sap Se) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-12-10. Vendor: Sap Se.

CVEs of Sap Netweaver As Java

• CVE-2024-47582 - CVSS 5.3 (medium), 2024-12-10: Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This…
• CVE-2024-34688 - CVSS 7.5 (high), 2024-06-11: Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may…
• CVE-2024-28164 - CVSS 5.3 (medium), 2024-06-11: SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which would otherwise be…
• CVE-2023-42477 - CVSS 6.5 (medium), 2023-10-10: SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing…
• CVE-2020-26826 - CVSS 6.5 (medium), 2020-12-09: Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without…
• CVE-2020-26820 - CVSS 9.1 (critical), 2020-11-10: SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console,…
• CVE-2020-6263 - CVSS 9.8 (critical), 2020-06-10: Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50;…
• CVE-2019-0391 - CVSS 4.3 (medium), 2019-11-13: Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would…