Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver 7.02 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2011-5263
Cross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the server parameter.
Sap Netweaver 7.0Sap Netweaver 7.10Sap NetweaverSap Netweaver 7.02Sap Netweaver 7.01
10
CVSSv2
CVE-2013-1592
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remot...
Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.30Sap Netweaver 2004s
5
CVSSv2
CVE-2013-1593
A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN.
Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.30Sap Netweaver 2004s
5
CVSSv2
CVE-2014-8591
Unspecified vulnerability in SAP Internet Communication Manager (ICM), as used in SAP NetWeaver 7.02 and 7.3, allows remote malicious users to cause a denial of service (process termination) via unknown vectors.
Sap Netweaver 7.02Sap Netweaver 7.30
5
CVSSv2
CVE-2014-8592
Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote malicious users to cause a denial of service (process termination) via a crafted request.
Sap Netweaver 7.02Sap Netweaver 7.30
5
CVSSv2
CVE-2014-3787
SAP NetWeaver 7.20 and previous versions allows remote malicious users to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
Sap Netweaver 7.02Sap Netweaver 7.0Sap Netweaver 7.01Sap NetweaverSap Netweaver 7.10Sap Netweaver 7.03
4.3
CVSSv2
CVE-2014-1965
Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 up to and including 7.02, and 7.10 up to and including 7.11 for SAP NetWeaver allows remote malicious users to inject arbitrary w...
Sap Netweaver 7.10Sap Netweaver 3.0Sap Netweaver 7.0Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.11
5
CVSSv2
CVE-2013-5751
Directory traversal vulnerability in SAP NetWeaver 7.x allows remote malicious users to read arbitrary files via unspecified vectors.
Sap Netweaver 7.0Sap Netweaver 7.01Sap Netweaver 7.02Sap Netweaver 7.03Sap Netweaver 7.10Sap Netweaver 7.30
10
CVSSv2
CVE-2012-4341
Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote malicious users to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a pac...
Sap Netweaver Abap 7.0Sap Netweaver Abap 7.02Sap Netweaver Abap 7.03
5
CVSSv2
CVE-2013-6815
The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and previous versions allows remote malicious users to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue.
Sap Netweaver 7.0Sap Netweaver 7.02Sap Netweaver 7.01Sap Netweaver 4.0Sap NetweaverSap Netweaver 7.30Sap Netweaver 7.10Sap Netweaver 7.03Sap Netweaver 6.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook