Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver 7.01 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-5263
Cross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the server parameter.
Sap Netweaver 7.0Sap Netweaver 7.10Sap NetweaverSap Netweaver 7.02Sap Netweaver 7.01
9.8
CVSSv3
CVE-2013-1592
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remot...
Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.30Sap Netweaver 2004s
7.5
CVSSv3
CVE-2013-1593
A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN.
Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.30Sap Netweaver 2004s
NA
CVE-2014-3787
SAP NetWeaver 7.20 and previous versions allows remote malicious users to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
Sap Netweaver 7.02Sap Netweaver 7.0Sap Netweaver 7.01Sap NetweaverSap Netweaver 7.10Sap Netweaver 7.03
NA
CVE-2013-5751
Directory traversal vulnerability in SAP NetWeaver 7.x allows remote malicious users to read arbitrary files via unspecified vectors.
Sap Netweaver 7.0Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.03Sap Netweaver 7.10Sap Netweaver 7.30
NA
CVE-2014-1965
Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 up to and including 7.02, and 7.10 up to and including 7.11 for SAP NetWeaver allows remote malicious users to inject arbitrary w...
Sap Netweaver 7.10Sap Netweaver 3.0Sap Netweaver 7.0Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.11
NA
CVE-2013-6815
The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and previous versions allows remote malicious users to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue.
Sap Netweaver 7.0Sap Netweaver 7.02Sap Netweaver 7.01Sap Netweaver 4.0Sap NetweaverSap Netweaver 7.30Sap Netweaver 7.10Sap Netweaver 7.03Sap Netweaver 6.4
NA
CVE-2013-6244
The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and previous versions allows remote malicious users to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction wi...
Sap Netweaver 7.03Sap Netweaver 7.02Sap NetweaverSap Netweaver 6.4Sap Netweaver 4.0Sap Netweaver 7.01Sap Netweaver 7.0Sap Netweaver 7.30Sap Netweaver 7.10
6.5
CVSSv3
CVE-2021-21488
Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability...
Sap Netweaver Knowledge Management 7.01Sap Netweaver Knowledge Management 7.02Sap Netweaver Knowledge Management 7.30Sap Netweaver Knowledge Management 7.31Sap Netweaver Knowledge Management 7.40Sap Netweaver Knowledge Management 7.50
9.8
CVSSv3
CVE-2020-6263
Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not perform any authentication checks for o...
Sap Netweaver Application Server Java 7.00Sap Netweaver Application Server Java 7.01Sap Netweaver Application Server Java 7.02Sap Netweaver Application Server Java 7.05Sap Netweaver Application Server Java 7.10Sap Netweaver Application Server Java 7.11Sap Netweaver Application Server Java 7.20Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook