Advisories · Technology

SAP_SE SAP NetWeaver AS JAVA.

Every CVE that names SAP_SE SAP NetWeaver AS JAVA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-47582 CVE record

CVSS 5.3 Medium

XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA
- SAP_SE SAP NetWeaver AS JAVA
- XML external entities (XXE)
Not analysed yet 10 Dec 2024
CVE-2024-28164 CVE record

CVSS 5.3 Medium

Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)
- SAP_SE SAP NetWeaver AS Java
- Information disclosure
Not analysed yet 11 Jun 2024
CVE-2024-34688 CVE record

CVSS 7.5 High

Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)
- SAP_SE SAP NetWeaver AS Java
- Denial of service
Not analysed yet 11 Jun 2024
CVE-2023-42477 CVE record

CVSS 6.5 Medium

Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)
- SAP_SE SAP NetWeaver AS Java
- Server-side request forgery (SSRF)
Not analysed yet 10 Oct 2023
CVE-2020-26826 CVE record

CVSS 6.5 Medium

SAP SE SAP NetWeaver AS JAVA: Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50…
- SAP SE SAP NetWeaver AS JAVA
Not analysed yet 9 Dec 2020
CVE-2020-26820 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

SAP SE SAP NetWeaver AS JAVA: SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50…
- SAP SE SAP NetWeaver AS JAVA
Not analysed yet 10 Nov 2020
CVE-2020-6263 CVE record

CVSS 6.9 Medium

SAP SE SAP NetWeaver AS JAVA: Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol…
- SAP SE SAP NetWeaver AS JAVA
Not analysed yet 10 Jun 2020
CVE-2019-0391 CVE record

SAP SE SAP NetWeaver AS Java: Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31…
- SAP SE SAP NetWeaver AS Java
Not analysed yet 13 Nov 2019