SAP NetWeaver 7.50 JAVA Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:netweaver:7.50:*:*:*:java_as:*:*:*
part: a version: 7.50 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Netweaver (27ebb32b-037e-5ce8-844e-70d059f1f917) |
| Edition | * |
| Language | * |
| Software edition | java_as |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23685 |
vulnerable | 2026-06-08 07:51:15.981688 |
Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)
MEDIUM (4.4)
Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic execution, potentially causing a denial of service. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected.
Published: 2026-02-10T03:02:27.146Z
Updated: 2026-02-10T17:19:28.762Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34688 |
vulnerable | 2026-06-08 06:37:34.831950 |
Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)
HIGH (7.5)
Due to unrestricted access to the Meta Model
Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks
on the application, which may prevent legitimate users from accessing it. This
can result in no impact on confidentiality and integrity but a high impact on
the availability of the application.
Published: 2024-06-11T02:02:21.587Z
Updated: 2024-08-02T02:59:22.017Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28164 |
vulnerable | 2026-06-08 06:33:26.615680 |
Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)
MEDIUM (5.3)
SAP NetWeaver AS Java (CAF - Guided Procedures)
allows an unauthenticated user to access non-sensitive information about the
server which would otherwise be restricted causing low impact on
confidentiality of the application.
Published: 2024-06-11T02:18:48.019Z
Updated: 2024-08-02T00:48:49.198Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.