Lucene search
K

7 matches found

NVD
NVD
added 2023/07/11 3:15 a.m.16 views

CVE-2023-31405

SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated attacker to craft a request over the network which can result in unwarranted modifications to a system log without user interaction. There is no ability to view any information or any...

5.3CVSS5.2AI score0.00254EPSS
Exploits0References2
CVE
CVE
added 2023/07/11 2:23 a.m.52 views

CVE-2023-31405

SAP NetWeaver AS for Java (ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50) is affected by a log-injection vulnerability via unauthenticated network requests that can modify system logs without user interaction. The root cause is log injection from network input; there is no information disclosur...

5.3CVSS5.2AI score0.00254EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/07/14 1:15 p.m.0 views

CVE-2020-6285

SAP NetWeaver - XML Toolkit for JAVA ENGINEAPI versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

6.5CVSS6.9AI score0.00256EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/07/14 12:30 p.m.13 views

CVE-2020-6285

SAP NetWeaver - XML Toolkit for JAVA ENGINEAPI versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

7.7CVSS6.4AI score0.00256EPSS
Exploits0References2
CVE
CVE
added 2020/07/14 12:30 p.m.39 views

CVE-2020-6285

CVE-2020-6285 affects SAP NetWeaver-XML Toolkit for JAVA (ENGINEAPI) across versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50. The vulnerability allows an attacker to access information that would otherwise be restricted, leading to Information Disclosure under certain conditions. Root cause deta...

7.7CVSS6.3AI score0.00256EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/09/10 4:7 p.m.77 views

CVE-2019-0355

SAP NetWeaver Application Server Java Web Container and SAP-JEECOR components are affected by CVE-2019-0355. The issue enables an attacker to inject code that the application executes, potentially allowing control over the application’s behavior. Affected products/components: ENGINEAPI before ver...

7.2CVSS7AI score0.00447EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/07/10 8:15 p.m.2 views

CVE-2019-0327

SAP NetWeaver for Java Application Server - Web Container, engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5, servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5, allows an attacker to upload files including script files without proper file format validation...

7.2CVSS7.1AI score0.00704EPSS
Exploits0References3
Rows per page
Query Builder