SAP NetWeaver Application Server Java 7.20

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_java:7.20:*:*:*:*:*:*:*

part: a version: 7.20 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Java (d5d874e3-be93-50c3-b6eb-d32fc3b335fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-37535 vulnerable 2026-06-08 05:32:54.335704 Details available
CRITICAL (10)
SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
Published: 2021-09-14T11:21:27.000Z
Updated: 2024-08-04T01:23:01.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33687 vulnerable 2026-06-08 05:32:12.154289 Details available
MEDIUM (4.5)
SAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information in one of their HTTP requests, an attacker can use this in conjunction with other attacks such as XSS to steal this information.
Published: 2021-07-14T11:05:00.000Z
Updated: 2024-08-03T23:58:22.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33670 vulnerable 2026-06-08 05:32:12.070836 Details available
HIGH (7.5)
SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to denial of service vulnerability.
Published: 2021-07-14T11:04:11.000Z
Updated: 2024-08-03T23:58:22.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21492 vulnerable 2026-06-08 05:29:12.160981 Details available
MEDIUM (4.3)
SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled.
Published: 2021-04-13T18:40:20.000Z
Updated: 2024-08-03T18:16:22.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21491 vulnerable 2026-06-08 05:29:12.158798 Details available
MEDIUM (4.7)
SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
Published: 2021-03-10T14:11:46.000Z
Updated: 2024-08-03T18:16:22.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21485 vulnerable 2026-06-08 05:29:12.127213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6365 vulnerable 2026-06-08 05:26:45.173021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6319 vulnerable 2026-06-08 05:26:45.125563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6309 vulnerable 2026-06-08 05:26:45.098171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6282 vulnerable 2026-06-08 05:26:44.998651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6263 vulnerable 2026-06-08 05:26:44.945383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6224 vulnerable 2026-06-08 05:26:44.793498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6202 vulnerable 2026-06-08 05:26:44.713991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26829 vulnerable 2026-06-08 05:23:51.564162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26820 vulnerable 2026-06-08 05:23:51.552922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26816 vulnerable 2026-06-08 05:23:51.535907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0391 vulnerable 2026-06-08 05:12:19.857941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0355 vulnerable 2026-06-08 05:12:19.761180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0327 vulnerable 2026-06-08 05:12:19.702208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0275 vulnerable 2026-06-08 05:12:19.597931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2504 vulnerable 2026-06-08 05:11:37.276403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2503 vulnerable 2026-06-08 05:11:37.275733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2492 vulnerable 2026-06-08 05:11:37.262724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2452 vulnerable 2026-06-08 05:11:37.176213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.