SAP NetWeaver Application Server Java 7.5
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver_application_server_java:7.5:*:*:*:*:*:*:*
part: a version: 7.5 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver Application Server Java (d5d874e3-be93-50c3-b6eb-d32fc3b335fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47592 |
vulnerable | 2026-06-08 06:48:12.912910 |
Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)
MEDIUM (5.3)
SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability.
Published: 2024-11-12T00:27:10.881Z
Updated: 2024-11-12T01:40:11.797Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22127 |
vulnerable | 2026-06-08 06:29:33.848872 |
Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
CRITICAL (9.1)
SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application.
Published: 2024-03-12T00:29:27.295Z
Updated: 2024-09-26T18:27:18.285Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0389 |
vulnerable | 2026-06-08 05:12:19.854802 |
Details available
An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.
Published: 2019-11-13T21:58:44.000Z
Updated: 2024-08-04T17:51:26.664Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.