Sap Netweaver_development_infrastructure
4 CVEs affecting Sap Netweaver_development_infrastructure. Latest disclosed: 2022-06-14. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-33690 | Critical | 9.9 | 2021-09-15 | Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.2… |
CVE-2022-29618 | Medium | 6.1 | 2022-06-14 | Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an unauthenti… |
CVE-2021-33691 | Medium | 6.1 | 2021-09-15 | NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabili… |
CVE-2013-6820 | | 2013-11-20 | Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers to execute arbitrary code by uploading a… |