Skip to content
OpenAdvisories

Product · SAP

SAP NetWeaver AS Java

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-47582

    XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA

    Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.

    SAP SAP NetWeaver AS Java
  • Medium 5.3
    CVE-2024-28164

    Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)

    SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which would otherwise be restricted causing low impact on confidentiality of the application.

    SAP SAP NetWeaver AS Java
  • Medium 6.5
    CVE-2023-42477

    Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)

    SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application.

    SAP SAP NetWeaver AS Java
  • Medium 6.5
    CVE-2020-26826

    Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any …

    SAP SAP NetWeaver AS Java
  • Medium 6.9
    CVE-2020-6263

    Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10…

    SAP SAP NetWeaver AS Java