Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver process integration 7.31 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2021-27617
The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document uploaded from local source. An attacker can craft a malicious XML which when uploaded and parsed by the application, co...
Sap Netweaver Process Integration 7.10Sap Netweaver Process Integration 7.11Sap Netweaver Process Integration 7.30Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.40Sap Netweaver Process Integration 7.50Sap Netweaver Process Integration 7.20
4
CVSSv2
CVE-2021-27618
The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the file uploaded from local source. An attacker could craft a malicious file and upload it to the application, which could ...
Sap Netweaver Process Integration 7.10Sap Netweaver Process Integration 7.11Sap Netweaver Process Integration 7.20Sap Netweaver Process Integration 7.30Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.40Sap Netweaver Process Integration 7.50
4
CVSSv2
CVE-2021-27604
In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Enterprise Service Repository JAVA Mappings), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note.
Sap Netweaver Process Integration 7.10Sap Netweaver Process Integration 7.20Sap Netweaver Process Integration 7.30Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.40Sap Netweaver Process Integration 7.50
4
CVSSv2
CVE-2021-27599
SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Integration Builder Framework), versions - 7.10, 7.30, 7.31, 7.40, 7.50, allows an malicious user to access information under certain conditions, which would otherwise be restricted.
Sap Netweaver Process Integration 7.10Sap Netweaver Process Integration 7.30Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.40Sap Netweaver Process Integration 7.50
4
CVSSv2
CVE-2020-26826
Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an malicious user to upload any file (including script files) without proper file format validation, leading to Unrestricted File Upload.
Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
4
CVSSv2
CVE-2019-0356
Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (prior to 7.31, 7.40, 7.50) allows an malicious user to access information which would otherwise be restricted.
Sap Netweaver Process Integration 7.50Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.40
4.3
CVSSv2
CVE-2019-0337
Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs and allows an malicious user to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting (XSS)...
Sap Netweaver Process Integration 7.10Sap Netweaver Process Integration 7.11Sap Netweaver Process Integration 7.30Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.40Sap Netweaver Process Integration 7.50
9
CVSSv2
CVE-2019-0328
ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.
Sap Netweaver Process Integration 7.0Sap Netweaver Process Integration 7.1Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.5Sap Netweaver Process Integration 7.3Sap Netweaver Process Integration 7.4
3.5
CVSSv2
CVE-2019-0316
SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate user-controlled inputs, which allows an attacker possessing admin privileges to read and modify data from the victim’s browser, by ...
Sap Netweaver Process Integration 7.40Sap Netweaver Process Integration 7.10Sap Netweaver Process Integration 7.11Sap Netweaver Process Integration 7.20Sap Netweaver Process Integration 7.30Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.50
5
CVSSv2
CVE-2019-0312
Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or...
Sap Netweaver Process Integration 7.50Sap Netweaver Process Integration 7.20Sap Netweaver Process Integration 7.10Sap Netweaver Process Integration 7.11Sap Netweaver Process Integration 7.30Sap Netweaver Process Integration 7.31Sap Netweaver Process Integration 7.40
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook