Sap Netweaver Application Server Java (Web Container)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_application_server_java_(web_container):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver Application Server Java (Web Container) (5aa74208-176f-5324-8368-c221c1368a2d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40128 |
vulnerable | 2026-07-29 00:49:29.369136 |
Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)
CRITICAL (9)
SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. Processing the included file could allow the attacker to view or modify sensitive information or render any part of the local system unavailable.
Published: 2026-06-09T00:20:14.581Z
Updated: 2026-06-10T03:58:35.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.