CS
Product
Content Server
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 2Low 0
Watch
Add Content Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22536 In wildKEV | 10.0 | Feb 9 | SAP Multiple Products HTTP Request Smuggling Vulnerability Affected: 7.53 |
| CVE-2023-40309 | 9.8 | Sep 12 | SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation… Affected: 6.50; 7.53; 7.54 |
| CVE-2023-40308 | 7.5 | Sep 12 | SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes… Affected: 6.50; 7.53; 7.54 |
| CVE-2024-33005 | 6.3 | Aug 13 | Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can… Affected: kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; kernel_7.89; +6 more |
| CVE-2023-26457 | 6.1 | Mar 14 | SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability Affected: 7.53 |
| CVE-2015-4157 | – | Jun 2 | SAP Content Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2127995 Affected: All versions, or not specified |
Showing 6