Sap Netweaver Application Server For Java

9 CVEs affecting Sap Netweaver Application Server For Java. Latest disclosed: 2023-07-11. Critical: 2, High: 2.

Top CVEs affecting Sap Netweaver Application Server For Java
CVESeverityScorePublishedSummary
CVE-2023-23857Critical9.92023-03-14Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use o…
CVE-2023-0017Critical9.42023-01-10An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an ope…
CVE-2023-30744High8.22023-05-09In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use…
CVE-2022-27669High7.52022-04-12An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be…
CVE-2021-27635Medium6.52021-06-09SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a network and submit a…
CVE-2023-31405Medium5.32023-07-11SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated attacker to craft a request over the network wh…
CVE-2023-27268Medium5.32023-03-14SAP NetWeaver AS Java (Object Analyzing Service) - version 7.50, does not perform necessary authorization checks, allowing an unauthenticated attacker to attac…
CVE-2023-26460Medium5.32023-03-14Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that requi…
CVE-2021-27621Medium4.92021-06-09Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows…