Netweaver As For Java
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver_as_for_java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver As For Java (46813d8a-f420-5b8e-a303-d612bf841742) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26460 |
vulnerable | 2026-06-08 05:57:39.744221 |
Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)
MEDIUM (5.3)
Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that require user identity
Published: 2023-03-14T04:56:08.985Z
Updated: 2025-02-27T15:09:25.265Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23857 |
vulnerable | 2026-06-08 05:56:04.568270 |
Improper Access Control in SAP NetWeaver AS for Java
CRITICAL (9.9)
Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services across systems. On a successful exploitation, the attacker can read and modify some sensitive information but can also be used to lock up any element or operation of the system making that it unresponsive or unavailable.
Published: 2023-03-14T04:36:33.138Z
Updated: 2025-02-27T18:15:53.970Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0017 |
vulnerable | 2026-06-08 05:52:03.941033 |
Improper access control in SAP NetWeaver AS for Java
CRITICAL (9.4)
An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current system. This could allow the attacker to have full read access to user data, make modifications to user data, and make services within the system unavailable.
Published: 2023-01-10T03:18:57.927Z
Updated: 2025-04-09T13:54:09.602Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.