Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_application_server_java:7.00:*:*:*:*:*:*:*

part: a version: 7.00 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver Application Server Java (d5d874e3-be93-50c3-b6eb-d32fc3b335fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21491 vulnerable 2026-06-08 05:29:12.157814 Details available
MEDIUM (4.7)
SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
Published: 2021-03-10T14:11:46.000Z
Updated: 2024-08-03T18:16:22.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6263 vulnerable 2026-06-08 05:26:44.943301 Details available
MEDIUM (6.9)
Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not perform any authentication checks for operations that require user identity leading to Authentication Bypass.
Published: 2020-06-10T12:44:43.000Z
Updated: 2024-08-04T08:55:22.315Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.