Sap Sap Netweaver As Java (Servercore)
2 CVEs affecting Sap Sap Netweaver As Java (Servercore). Latest disclosed: 2018-12-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-2503 | High | 7.4 | 2018-12-11 | By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. This has been fixed in… |
CVE-2018-2504 | Medium | 6.1 | 2018-12-11 | SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross… |