Netweaver Java Application Server vulnerabilities | LiveThreat CVE Feed

Product

Netweaver Java Application Server

by Sap · last CVE Jun 2, 2015

CVEs

On KEV

–

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Netweaver Java Application Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-4158	–	2%	Jun 2	SAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2121661 Affected: All versions, or not specified
CVE-2015-2282	–	4%	Jun 2	Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server… Affected: All versions, or not specified
CVE-2015-2278	–	2%	Jun 2	The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application… Affected: All versions, or not specified
CVE-2014-8590	–	2%	Nov 4	XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted… Affected: All versions, or not specified
CVE-2014-3133	–	2%	Apr 30	SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified… Affected: All versions, or not specified