Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_as_java_(guided_procedures):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver As Java (Guided Procedures) (5044d2c3-c45d-5cf1-9d25-0e00d05c248c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24743 vulnerable 2026-06-08 06:29:41.644481 XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)
HIGH (8.6)
SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.
Published: 2024-02-13T02:43:40.755Z
Updated: 2024-11-07T19:10:20.078Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.