The vulnerability of SAP NetWeaver Application Server Java, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of SAP NetWeaver Application Server Java is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications, related to authentication errors, allows attackers to increase their privileges.

The vulnerability of the software for integrating SAP NetWeaver Process Integration corporate applications is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications, related to access control deficiencies, allows a perpetrator to send arbitrary requests to the server through the PI Axis adapter.

The vulnerability of the software for integrating SAP NetWeaver Process Integration corporate applications is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the server through the PI Axis adapter...

The vulnerability of Netweaver Application Server Java web applications lies in insufficient validation of requests on the server side, allowing attackers to expose privileged user credentials.

The vulnerability of Netweaver Application Server Java web applications is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to obtain privileged user credentials by using a specially created XML file...

SAP NetWeaver Process Integration Information Disclosure Vulnerability (CNVD-2020-04285)

SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. An information disclosure...

SAP NetWeaver Application Server Java Information Disclosure Vulnerability

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server Java. The...

Unspecified Vulnerability in SAP NetWeaver Application Server Java

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java J2EE-Framework that can be...

Unspecified Vulnerability in SAP NetWeaver Process Integration

SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. An unspecified vulnerability...

SAP NetWeaver Process Integration Data Forgery Issue Vulnerability

SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. A vulnerability exists in SAP...

The vulnerability of the ABAP Tests module of the SAP NetWeaver Process Integration software allows a perpetrator to execute operating system commands with elevated privileges.

The vulnerability of the ABAP Tests module of the SAP NetWeaver Process Integration software exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute operating system command...

CVE-2019-0389

An administrator of SAP NetWeaver Application Server Java J2EE-Framework, corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5, may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise...

CVE-2019-0391

Under certain conditions SAP NetWeaver AS Java corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 allows an attacker to access information which would otherwise be restricted...

CVE-2019-0391

Under certain conditions SAP NetWeaver AS Java corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 allows an attacker to access information which would otherwise be restricted...

CVE-2019-0389

An administrator of SAP NetWeaver Application Server Java J2EE-Framework, corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5, may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise...

Authentication flaw

Under certain conditions SAP NetWeaver AS Java corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 allows an attacker to access information which would otherwise be restricted...

Code injection

An administrator of SAP NetWeaver Application Server Java J2EE-Framework, corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5, may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise...

CVE-2019-0391

The CVE-2019-0391 issue affects SAP NetWeaver AS Java and enables information disclosure. Multiple sources confirm affected SAP NetWeaver AS Java versions: 7.10, 7.20, 7.30, 7.31, 7.40, and 7.50. Root cause and impact are described as an information-disclosure vulnerability that could allow attac...

CVE-2019-0391

Under certain conditions SAP NetWeaver AS Java corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 allows an attacker to access information which would otherwise be restricted...

CVE-2019-0389

CVE-2019-0389 affects SAP NetWeaver Application Server Java (J2EE-Framework). Affected: SAP NetWeaver AS Java, Java Server component/function; underlying issue enables privilege escalation where an administrator can change privileges for functions and enable users to execute previously restricted...

CVE-2019-0389

An administrator of SAP NetWeaver Application Server Java J2EE-Framework, corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5, may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise...