Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_uddi_server_(services_registry):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver Uddi Server (Services Registry) (d640da7d-fa80-5a56-8670-b8eb49d4b7bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6203 vulnerable 2026-06-08 05:26:44.716132 Details available
CRITICAL (9.1)
SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs, leading to Path Traversal.
Published: 2020-03-10T20:20:04.000Z
Updated: 2024-08-04T08:55:21.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0351 vulnerable 2026-06-08 05:12:19.749038 Details available
A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Because of this, an attacker can exploit Services Registry potentially enabling them to take complete control of the product, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.
Published: 2019-08-14T13:57:00.000Z
Updated: 2024-08-04T17:44:16.464Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.