Sap Netweaver As Java
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_as_java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver As Java (cb9194bc-c92d-55f3-abb4-7cd107dfd299) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47582 |
vulnerable | 2026-06-08 06:48:12.892688 |
XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA
MEDIUM (5.3)
Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.
Published: 2024-12-10T00:12:24.270Z
Updated: 2024-12-10T20:38:26.239Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34688 |
vulnerable | 2026-06-08 06:37:34.837791 |
Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)
HIGH (7.5)
Due to unrestricted access to the Meta Model
Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks
on the application, which may prevent legitimate users from accessing it. This
can result in no impact on confidentiality and integrity but a high impact on
the availability of the application.
Published: 2024-06-11T02:02:21.587Z
Updated: 2024-08-02T02:59:22.017Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28164 |
vulnerable | 2026-06-08 06:33:26.624695 |
Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)
MEDIUM (5.3)
SAP NetWeaver AS Java (CAF - Guided Procedures)
allows an unauthenticated user to access non-sensitive information about the
server which would otherwise be restricted causing low impact on
confidentiality of the application.
Published: 2024-06-11T02:18:48.019Z
Updated: 2024-08-02T00:48:49.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42477 |
vulnerable | 2026-06-08 06:11:08.143481 |
Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)
MEDIUM (6.5)
SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application.
Published: 2023-10-10T01:37:54.816Z
Updated: 2024-09-18T18:55:58.441Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6263 |
vulnerable | 2026-06-08 05:26:44.942414 |
Details available
MEDIUM (6.9)
Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not perform any authentication checks for operations that require user identity leading to Authentication Bypass.
Published: 2020-06-10T12:44:43.000Z
Updated: 2024-08-04T08:55:22.315Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26826 |
vulnerable | 2026-06-08 05:23:51.558369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26820 |
vulnerable | 2026-06-08 05:23:51.552786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0391 |
vulnerable | 2026-06-08 05:12:19.857865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.