Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_as_java_(lm_configuration_wizard):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver As Java (Lm Configuration Wizard) (0b026a92-8e48-5a0c-a598-15303a6cd1b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6287 vulnerable 2026-06-08 05:26:45.009638 Details available
CRITICAL (10)
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check.
Published: 2020-07-14T12:30:14.000Z
Updated: 2025-10-21T23:35:39.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6286 vulnerable 2026-06-08 05:26:45.008586 Details available
MEDIUM (5.3)
The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal.
Published: 2020-07-14T12:30:14.000Z
Updated: 2024-08-04T08:55:22.280Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.