Netweaver Application Server For Java vulnerabilities

Product

Netweaver Application Server For Java

by Sap · last CVE Jul 11, 2023

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 2Medium 5Low 0

Severity

Exploitation

Watch

Add Netweaver Application Server For Java to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-23857	8.6	1%	Mar 14	Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and… Affected: 7.50
CVE-2022-27669	7.5	1%	Apr 12	An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted Affected: 7.50