Description
SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated attacker to craft a request over the network which can result in unwarranted modifications to a system log without user interaction. There is no ability to view any information or any effect on availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP NetWeaver AS for Java (Log Viewer) | ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50 | — |
Advisories 3
- WID-SEC-2024-0025 SAP Patchday Januar 2024 BSI CERT-Bund (WID) · Jan 8, 2024
- WID-SEC-2023-2600 SAP Patchday Oktober 2023 BSI CERT-Bund (WID) · Oct 9, 2023
- WID-SEC-2023-1705 SAP Patchday Juli 2023 BSI CERT-Bund (WID) · Jul 10, 2023