Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver application server java 7.3 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3
CVE-2010-5326
The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly prior to 7.3, does not require authentication, which allows remote malicious users to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a "D...
Sap Netweaver Application Server Java
8.8
CVSSv3
CVE-2019-0389
An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.
Sap Netweaver Application Server Java 7.1Sap Netweaver Application Server Java 7.2Sap Netweaver Application Server Java 7.3Sap Netweaver Application Server Java 7.4Sap Netweaver Application Server Java 7.5Sap Netweaver Application Server Java 7.31
7.2
CVSSv3
CVE-2019-0327
SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an malicious user to upload files (including script files) without proper file format validation.
Sap Netweaver Application Server Java 7.20Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.10Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.50
6.1
CVSSv3
CVE-2017-11458
Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote malicious users to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783.
Sap Netweaver Application Server Java 7.30
5.3
CVSSv3
CVE-2016-3973
The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 up to and including 7.5 allows remote malicious users to obtain sensitive user information by visiting webdynpro/resources/sap.com/tc~rtc~coll.appl.rtc~wd_chat/Chat#, pressing ...
Sap Netweaver Application Server Java
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654CVE-2023-49606encryptionNULL pointer dereferenceCVE-2024-4439CVE-2024-4649race conditionCVE-2024-27202CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook