sap netweaver application server for java 7.50 vulnerabilities and exploits

(subscribe to this query)

SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated malicious user to craft a request over the network which can result in unwarranted modifications to a system log without user interaction. There is no ability to view a...

Sap Netweaver Application Server For Java 7.50

In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called without further author...

Sap Netweaver Application Server For Java 7.50

Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated malicious user to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affectin...

Sap Netweaver Application Server For Java 7.50

1 Article

Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that require user identity

Sap Netweaver Application Server For Java 7.50

SAP NetWeaver AS Java (Object Analyzing Service) - version 7.50, does not perform necessary authorization checks, allowing an unauthenticated malicious user to attach to an open interface and make use of an open naming and directory API to access a service which will enable them ...

Sap Netweaver Application Server For Java 7.50

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an ...

Sap Netweaver Application Server Java 7.50

An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and da...

Sap Netweaver Application Server For Java 7.50

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges.

Sap Netweaver Application Server For Java 7.50

Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an malicious user to access information which could lead to information gathering for further exploits and attacks.

Sap Netweaver Application Server Java 7.50

SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.

Sap Netweaver Application Server Java 7.11 Sap Netweaver Application Server Java 7.20 Sap Netweaver Application Server Java 7.30 Sap Netweaver Application Server Java 7.31 Sap Netweaver Application Server Java 7.40 Sap Netweaver Application Server Java 7.50

2 Articles

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook