NA
Product
Netweaver Application Server Java
On CISA KEVExploited in the wild
69
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 20Medium 37Low 1
Watch
Add Netweaver Application Server Java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6287 In wildKEV | 10.0 | Jul 14 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability Affected: 7.30; 7.31; 7.40; 7.50 |
| CVE-2010-5326 In wildKEV | 10.0 | May 13 | SAP NetWeaver Remote Code Execution Vulnerability Affected: through 7.30 |
| CVE-2016-2386 In wildKEV | 9.8 | Feb 16 | SAP NetWeaver SQL Injection Vulnerability Affected: 7.40 |
| CVE-2020-26829 | 10.0 | Dec 9 | SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication… Affected: 7.11; 7.20; 7.30; 7.31; 7.40; 7.50 |
| CVE-2023-40309 | 9.8 | Sep 12 | SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation… Affected: kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; kernel_7.89; +10 more |
| CVE-2022-22532 | 9.8 | Feb 9 | In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could… Affected: 7.22; 7.49; 7.53; krnl64nuc_7.22; krnl64nuc_7.22ext; krnl64nuc_7.49; +3 more |
| CVE-2021-37535 | 9.8 | Sep 14 | SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges Affected: 7.11; 7.20; 7.30; 7.31; 7.40; 7.50 |
| CVE-2020-6263 | 9.8 | Jun 10 | Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01,… Affected: 7.00; 7.01; 7.02; 7.05; 7.10; 7.11; +5 more |
| CVE-2019-0345 | 9.8 | Aug 14 | A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator System Overview), versions 7.30, 7.31, 7.40, 7.50, by sending… Affected: 7.30; 7.31; 7.40; 7.50 |
| CVE-2024-22127 | 9.1 | Mar 12 | SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to… Affected: 7.5 |
| CVE-2016-3974 | 9.1 | Apr 7 | XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB… Affected: 7.10 through 7.50 |
Showing 11