NA
Product
Netweaver Application Server Java
On CISA KEVExploited in the wild
69
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 20Medium 37Low 1
Watch
Add Netweaver Application Server Java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6287 In wildKEV | 10.0 | Jul 14 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability Affected: 7.30; 7.31; 7.40; 7.50 |
| CVE-2010-5326 In wildKEV | 10.0 | May 13 | SAP NetWeaver Remote Code Execution Vulnerability Affected: through 7.30 |
| CVE-2016-2386 In wildKEV | 9.8 | Feb 16 | SAP NetWeaver SQL Injection Vulnerability Affected: 7.40 |
| CVE-2017-12637 In wildKEV | 7.5 | Aug 7 | SAP NetWeaver Directory Traversal Vulnerability Affected: 7.50 |
| CVE-2016-3976 In wildKEV | 7.5 | Apr 7 | SAP NetWeaver Directory Traversal Vulnerability Affected: 7.10 through 7.50 |
| CVE-2016-9563 In wildKEV | 6.5 | Nov 23 | SAP NetWeaver XML External Entity (XXE) Vulnerability Affected: 7.50 |
| CVE-2016-2388 In wildKEV | 5.3 | Feb 16 | SAP NetWeaver Information Disclosure Vulnerability Affected: 7.10 through 7.50 |
Showing 7