SAP NetWeaver AS Java Information Disclosure (Enterprise Portal) (3059764)

SAP NetWeaver AS JAVA Enterprise Portal, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information in one of their HTTP requests, an attacker can use this in conjunction with other attacks such as XSS to steal this information. Note that Nessus has not tested for this issue but...

CVE-2021-33687

SAP NetWeaver AS JAVA (Enterprise Portal) information disclosure vulnerability (CVE-2021-33687) affects versions 7.10, 7.20, 7.30, 7.31, 7.40, and 7.50. The issue involves sensitive information being revealed in one HTTP request, which an attacker could leverage in combination with other attacks ...