Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap netweaver j2ee engine 7.40 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-7239
SQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver J2EE Engine 7.40 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Sap Netweaver J2ee Engine 7.40
4.7
CVSSv3
CVE-2018-2415
SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7.30, 7.31, 7.40, 7.50) do not sufficiently encode user controlled inputs, resulting in a content spoofing vulnerability when...
Sap Netweaver Java Web Container And Http Service Engine 7.50Sap Netweaver Java Web Container And Http Service Engine 7.10Sap Netweaver Java Web Container And Http Service Engine 7.11Sap Netweaver Java Web Container And Http Service Engine 7.30Sap Netweaver Java Web Container And Http Service Engine 7.31Sap Netweaver Java Web Container And Http Service Engine 7.40Sap J2ee Engine Server Core 7.30Sap J2ee Engine Server Core 7.31Sap J2ee Engine Server Core 7.40Sap J2ee Engine Server Core 7.50Sap J2ee Engine Server Core 7.11
5.3
CVSSv3
CVE-2016-1910
The User Management Engine (UME) in SAP NetWeaver 7.4 allows malicious users to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290.
Sap Netweaver 7.40
9.8
CVSSv3
CVE-2016-2386
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2101079.
Sap Netweaver Application Server Java 7.40
5.3
CVSSv3
CVE-2016-2388
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote malicious users to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.
Sap Netweaver Application Server Java
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310CVE-2024-21683CVE-2024-22187chromedeserializationXPath injectionCVE-2024-27842denial of serviceCVE-2024-24851googleCVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook