Sap Netweaver As Java (Servercore)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:sap_netweaver_as_java_(servercore):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Sap Netweaver As Java (Servercore) (f6a6c8da-dbdf-5d3d-ad7c-f423e429faf2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-2504 |
vulnerable | 2026-06-08 05:11:37.276315 |
Details available
SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Manipulation or Cross-Site Scripting (XSS) vulnerability. This is fixed in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50.
Published: 2018-12-11T23:00:00.000Z
Updated: 2024-08-05T04:21:34.413Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2503 |
vulnerable | 2026-06-08 05:11:37.275658 |
Details available
By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. This has been fixed in SAP NetWeaver AS Java (ServerCore versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50).
Published: 2018-12-11T23:00:00.000Z
Updated: 2024-08-05T04:21:34.355Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.