NA
Product
Netweaver Application Server For Java
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 5Low 0
Watch
Add Netweaver Application Server For Java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27635 | 6.5 | Jun 9 | SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a network and submit a specially crafted… Affected: 7.20; 7.30; 7.31; 7.40; 7.50 |
| CVE-2023-31405 | 5.3 | Jul 11 | SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated attacker to craft a request over the network which can result in… Affected: 7.50 |
| CVE-2023-27268 | 5.3 | Mar 14 | SAP NetWeaver AS Java (Object Analyzing Service) - version 7.50, does not perform necessary authorization checks, allowing an unauthenticated attacker to attach to an open… Affected: 7.50 |
| CVE-2023-26460 | 5.3 | Mar 14 | Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that require user identity Affected: 7.50 |
| CVE-2021-27621 | 4.9 | Jun 9 | Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows attackers to access… Affected: 7.11; 7.20; 7.30; 7.31; 7.40; 7.50 |
Showing 5