Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver application server java 7.40 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3
CVE-2020-26829
SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal clus...
Sap Netweaver Application Server Java 7.11Sap Netweaver Application Server Java 7.20Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
10
CVSSv3
CVE-2020-6287
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the...
Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
9.8
CVSSv3
CVE-2021-37535
SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
Sap Netweaver Application Server Java 7.11Sap Netweaver Application Server Java 7.20Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
9.8
CVSSv3
CVE-2020-6263
Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not perform any authentication checks for o...
Sap Netweaver Application Server Java 7.00Sap Netweaver Application Server Java 7.01Sap Netweaver Application Server Java 7.02Sap Netweaver Application Server Java 7.05Sap Netweaver Application Server Java 7.10Sap Netweaver Application Server Java 7.11Sap Netweaver Application Server Java 7.20Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
9.8
CVSSv3
CVE-2019-0345
A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator System Overview), versions 7.30, 7.31, 7.40, 7.50, by sending a specially crafted XML file and trick the application server into leaking authentication credential...
Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
9.8
CVSSv3
CVE-2016-2386
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2101079.
Sap Netweaver Application Server Java 7.40
8.8
CVSSv3
CVE-2017-7717
SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2356504.
Sap Netweaver Application Server Java 7.40
7.5
CVSSv3
CVE-2021-33670
SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an malicious user to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitim...
Sap Netweaver Application Server Java 7.20Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50Sap Netweaver Application Server Java 7.10Sap Netweaver Application Server Java 7.11
7.5
CVSSv3
CVE-2020-6309
SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication checks for a web service allowing the malicious user to send several payloads and leading to complete denial of service.
Sap Netweaver Application Server Java 7.10Sap Netweaver Application Server Java 7.11Sap Netweaver Application Server Java 7.20Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
7.5
CVSSv3
CVE-2016-9562
SAP NetWeaver AS JAVA 7.4 allows remote malicious users to cause a Denial of Service (null pointer exception and icman outage) via an HTTPS request to the sap.com~P4TunnelingApp!web/myServlet URI, aka SAP Security Note 2313835.
Sap Netweaver Application Server Java 7.40
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook