CVE-2020-6287

CVE-2020-6287 affects SAP NetWeaver AS JAVA (LM Configuration Wizard) versions 7.30–7.50. The vulnerability is a missing authentication check that allows an unauthenticated attacker to execute configuration tasks and create an administrative user, thereby compromising Confidentiality, Integrity a...

CVE-2010-5326

The CVE-2010-5326 issue affects SAP NetWeaver Application Server Java, specifically the Invoker Servlet, and is exploitable without authentication. Affected are SAP NetWeaver AS Java platforms possibly older than version 7.3, where an unauthenticated HTTP/HTTPS request can trigger remote code exe...

CVE-2016-9563

This CVE concerns XML External Entity (XXE) injection in SAP NetWeaver AS Java 7.5, specifically the BC-BMT-BPM-DSK component exposed via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI. Root cause is an XXE flaw that could allow an authenticated remote attacker to read arbitrary fil...

CVE-2016-3976

CVE-2016-3976 affects SAP NetWeaver AS Java versions 7.1–7.5. The vulnerability is a directory traversal in the AS Java Monitoring/CrashFileDownloadServlet component, exploitable remotely via a ..\ in the fileName parameter to read arbitrary files on the server. Public references point to SAP Sec...

CVE-2016-2386

CVE-2016-2386 affects SAP NetWeaver J2EE Engine 7.40, specifically the UDDI server. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with exploitation attempts documented in PoCs and exploits targeting the UDDI interface ...

CVE-2016-2388

CVE-2016-2388 affects SAP NetWeaver AS JAVA (notably 7.4; referenced in SAP Security Note 2256846) where the Universal Worklist Configuration enables remote disclosure of sensitive user information via a crafted HTTP request. Documented impact is information disclosure with network-based access a...

CVE-2017-12637

SAP NetWeaver Application Server Java 7.5 is affected by a local/file read vulnerability (CVE-2017-12637) in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows remote attackers to read arbitrary server files via a .. in the query string. The issue is confirmed in multiple connected s...

CVE-2020-6286

SAP NetWeaver AS Java LM Configuration Wizard (versions 7.30–7.50) is affected by CVE-2020-6286/6287, due to insufficient input path validation and lack of authentication for certain web services. The vulnerability allows an unauthenticated attacker to perform path traversal (downloading zip file...

CVE-2022-22532

Summary (CVE-2022-22532) : SAP NetWeaver Application Server Java is affected in multiple builds (KRNL64NUC 7.22/7.22EXT/7.49/7.53 and KERNEL 7.22/7.49/7.53). An unauthenticated attacker can send a crafted HTTP request that triggers improper shared memory buffer handling, enabling execution of a p...

CVE-2019-0327

This CVE affects SAP NetWeaver for Java Application Server Web Container. The vulnerability allows an attacker to upload files (including script files) due to inadequate file format validation in engineapi (versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5) and servercode (versions 7.2, 7.3, 7.31, 7.4, 7.5)...

CVE-2019-0318

CVE-2019-0318 affects SAP NetWeaver Application Server for Java (Startup Framework) versions 7.21, 7.22, 7.45, 7.49 and 7.53. Under certain conditions, an attacker can access information that would be restricted (information disclosure). The Connected documents reiterate the same affected product...

CVE-2022-22533

SAP NetWeaver Application Server Java (KRNL64NUC 7.22/7.22EXT/7.49, KRNL64UC 7.22/7.22EXT/7.49/7.53, KERNEL 7.22/7.49/7.53) is affected by CVE-2022-22533. The issue arises from improper error handling that allows an attacker to submit multiple HTTP server requests, triggering errors and consuming...

CVE-2023-40309

CVE-2023-40309 affects SAP CommonCryptoLib and is caused by insufficient authentication checks, enabling possible privilege escalation for an authenticated user and potential reading/modification/deletion of restricted data. The vulnerability is rated CRITICAL (CVSSv3.1: 9.8, AV:N/AC:L/PR:N/UI:N/...

CVE-2021-33670

SAP NetWeaver AS for Java Http Service Monitoring Filter (versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) is vulnerable to denial of service via sending multiple HTTP requests with different method types, crashing the filter and making the server unavailable. The root cause relates to the Http...

CVE-2021-37535

CVE-2021-37535 affects SAP NetWeaver Application Server Java, specifically the JMS Connector Service . Affected versions: 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 . Root cause described in sources as missing/incorrect authorization checks for user privileges, enabling a remote attacker to bypass author...

CVE-2024-22127

CVE-2024-22127 affects SAP NetWeaver Application Server for Java (Administer Log Viewer plug-in) 7.50. A high-privilege attacker can upload potentially dangerous files, enabling command injection that can impact confidentiality, integrity, and availability. Root cause: file upload validation weak...

CVE-2020-6202

CVE-2020-6202 concerns SAP NetWeaver Application Server Java (User Management Engine), affected in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50. The issue is that the LDAP data source configuration XML document accepted from an untrusted source is not sufficiently validated, leading to Missi...

CVE-2024-34688

CVE-2024-34688 affects SAP NetWeaver AS Java where unrestricted access to the Meta Model Repository services can let attackers cause DoS, impacting availability with no confidentiality/integrity impact. Affected product: SAP NetWeaver AS Java (Meta Model Repository). Root cause: unrestricted acce...

CVE-2022-26103

The CVE-2022-26103 entry relates to SAP NetWeaver (Real Time Messaging Framework) version 7.50. The connected documents corroborate a vulnerability where under certain conditions an attacker can access information, enabling information gathering for further exploits. Affected component: Real Time...

CVE-2022-41262

CVE-2022-41262 affects SAP NetWeaver AS Java (HTTP Provider Service), version 7.50. The issue is due to insufficient input validation that allows an unauthenticated attacker to inject a script into a web request header. The resulting impact is described as limited in confidentiality and integrity...

CVE-2023-40308

The CVE-2023-40308 issue affects SAP CommonCryptoLib and is caused by memory corruption triggered by an unauthenticated crafted request sent to an open port. The resulting crash makes the target component unavailable, with no impact on confidentiality or integrity reported. Evidence across multip...

CVE-2024-22126

CVE-2024-22126 – SAP NetWeaver AS Java (User Admin) XSS : The User Admin application in SAP NetWeaver AS Java 7.50 insufficiently validates and improperly encodes incoming URL parameters before including them in the redirect URL, enabling Cross-Site Scripting. Impact: high confidentiality impact;...

CVE-2019-0355

SAP NetWeaver Application Server Java Web Container and SAP-JEECOR components are affected by CVE-2019-0355. The issue enables an attacker to inject code that the application executes, potentially allowing control over the application’s behavior. Affected products/components: ENGINEAPI before ver...

CVE-2020-6365

CVE-2020-6365 affects SAP NetWeaver AS Java (versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50). The issue is an unauthenticated remote redirect on Start Page caused by insufficient reverse tabnabbing URL validation, enabling phishing to trick users into visiting malicious sites or malware pages....

CVE-2023-24526

CVE-2023-24526 affects SAP NetWeaver Application Server Java for Classload Service 7.50. The vulnerability is an authentication bypass: functions that require user identity lack checks, enabling privilege escalation and exposing non-sensitive server data to unassigned users. The issue is document...

CVE-2016-3974

CVE-2016-3974 affects SAP NetWeaver AS JAVA 7.1–7.5. An XML External Entity (XXE) vulnerability in the Configuration Wizard/ctcprotocol servlet allows remote attackers to cause a denial of service, perform SMB relay actions, or read arbitrary files via a crafted XML to the ServerNodesWSService en...

CVE-2020-6190

CVE-2020-6190 affects SAP NetWeaver AS Java (Heap Dump Application). Vulnerable endpoints in versions 7.30, 7.31, 7.40, 7.50 can disclose system information such as hostname, server node, and installation path. The underlying impact is information disclosure. The provided documents describe the a...

CVE-2021-21492

SAP NetWeaver AS Java (HTTP Service) is affected by a content spoofing vulnerability (CVE-2021-21492) due to insufficient validation of the login group in URLs, enabling content spoofing when directory listings are enabled. Affected versions include 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. E...

CVE-2021-27598

SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet) vulnerability CVE-2021-27598 affects SAP NetWeaver AS JAVA versions 7.31, 7.40, and 7.50. The root cause is a missing authorization check in the Customer Usage Provisioning Servlet, allowing an attacker to read statistical data such as p...

CVE-2021-21485

The CVE-2021-21485 entry concerns SAP NetWeaver Application Server for Java. The provided documents state that an unauthorized attacker could entice an administrator to invoke telnet commands on the SAP NetWeaver AS Java server, enabling the attacker to obtain the NTLM hashes of a privileged user...

CVE-2020-6309

SAP NetWeaver AS JAVA (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11) is affected by CVE-2020-6309, where a web service fails to perform authentication checks, enabling an attacker to send multiple payloads and cause a denial of service. Impact is a network‑b...

CVE-2020-6319

CVE-2020-6319 affects SAP NetWeaver Application Server Java (versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50). The issue is a cross-site scripting vulnerability where an unauthenticated attacker can cause the server to include JavaScript blocks in web pages or URLs with characters that are norm...

CVE-2023-42480

The CVE-2023-42480 issue affects SAP NetWeaver AS Java Logon (version 7.50). An unauthenticated attacker can brute-force the login function to enumerate legitimate user IDs, resulting in confidentiality impact (user ID disclosure) with no reported impact on integrity or availability. Multiple con...

CVE-2020-26829

SAP NetWeaver AS JAVA P2P Cluster Communication (versions 7.11–7.50) is affected by CVE-2020-26829 due to a missing authentication check, enabling an unauthenticated attacker to initiate privileged actions that are normally restricted to administrators, including access to system administration f...

CVE-2021-21491

CVE-2021-21491 affects SAP NetWeaver Application Server Java (WebDynpro Java) and its supported Java applications, specifically versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. The vulnerability is described as a Reverse Tabnabbing issue that can allow an attacker to redirect users to...

CVE-2020-6263

CVE-2020-6263 affects SAP NetWeaver AS Java when standalone clients connect via P4 Protocol. Affected components include SAP-JEECOR (7.00, 7.01), SERVERCOR (7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), and CORE-TOOLS (7.00–7.50). The root cause is that, for operations requiring user identity, authe...

CVE-2024-24743

SAP NetWeaver AS Java (CAF - Guided Procedures) 7.50 is affected by an unauthenticated XXE-type vulnerability triggered by submitting a crafted XML over the network. The issue allows an attacker to access sensitive files and data without modifying them; availability is not affected per the CVE en...

CVE-2017-11457

CVE-2017-11457 is an XXE vulnerability in SAP NetWeaver AS JAVA 7.5, affecting the component com.sap.km.cm.ice . A remote authenticated attacker can abuse a crafted XML DTD to read arbitrary files or perform SSRF. The issue is documented against SAP NetWeaver AS JAVA 7.5 via SAP Security Note 238...

CVE-2020-6224

CVE-2020-6224 affects SAP NetWeaver AS Java (HTTP Service). Affected versions are 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. The vulnerability allows an attacker with administrator privileges to access user credentials (e.g., passwords) stored in trace files when a user logs in and sends login...

CVE-2020-26820

SAP NetWeaver AS Java remote code execution (CVE-2020-26820) affects SAP NetWeaver AS Java versions 7.20, 7.30, 7.31, 7.40, 7.50. An attacker authenticated as an administrator can use the administrator console to expose unauthenticated file-system access and upload a malicious file, enabling the ...

CVE-2021-27601

CVE-2021-27601 affects SAP NetWeaver AS Java (Applications based on HTMLB for Java). An authorized, basic-level attacker can store a malicious file on the server; when a victim opens that file, a Cross-Site Scripting (XSS) vulnerability can allow reading and modification of data. The root cause i...

CVE-2021-33689

SAP NetWeaver AS Java 7.50 Administrator applications are affected by CVE-2021-33689: insufficient logging for users with limited privileges that access any Administrator app, impacting audit log integrity. The issue is documented across multiple feeds (NVD/Red Hat/Nessus) with low–medium severit...

CVE-2018-2504

CVE-2018-2504 affects SAP NetWeaver AS Java Web Container. The issue arises because the HTTP Host header is not validated against a whitelist, enabling potential HTTP Host Header Manipulation and related XSS . Root cause: missing host header whitelisting in the web container. Impact is mitigated ...

CVE-2019-0391

The CVE-2019-0391 issue affects SAP NetWeaver AS Java and enables information disclosure. Multiple sources confirm affected SAP NetWeaver AS Java versions: 7.10, 7.20, 7.30, 7.31, 7.40, and 7.50. Root cause and impact are described as an information-disclosure vulnerability that could allow attac...

CVE-2021-33687

SAP NetWeaver AS JAVA (Enterprise Portal) information disclosure vulnerability (CVE-2021-33687) affects versions 7.10, 7.20, 7.30, 7.31, 7.40, and 7.50. The issue involves sensitive information being revealed in one HTTP request, which an attacker could leverage in combination with other attacks ...

CVE-2020-26826

CVE-2020-26826 affects SAP NetWeaver AS JAVA (Process Integration Monitoring) and is described across multiple sources as a vulnerability where an attacker can upload any file (including scripts) due to insufficient file format validation. Affected versions include SAP NetWeaver AS JAVA 7.31, 7.4...

CVE-2020-6313

CVE-2020-6313 affects SAP NetWeaver Application Server Java (XML Forms) on versions 7.30, 7.31, 7.40, 7.50. The root cause is insufficient encoding of user-controlled inputs, enabling an authenticated user with special roles to store content that, when accessed by a victim, can execute JavaScript...

CVE-2023-42477

CVE-2023-42477 affects SAP NetWeaver AS Java GRMG Heartbeat (version 7.50). The vulnerability permits an unauthenticated attacker to send a crafted request from a vulnerable web application, with limited impact on confidentiality and integrity (as described in multiple sources). The CVSS vector i...

CVE-2016-3975

SAP NetWeaver AS Java 7.1–7.5 is affected by a cross-site scripting (XSS) vulnerability (CVE-2016-3975) that can be exploited remotely via the NavigationURLTester endpoint to inject arbitrary script/HTML. Affected component is the SAP NetWeaver AS Java application server; root cause relates to th...

CVE-2017-14581

CVE-2017-14581 involves SAP NetWeaver AS JAVA, affected in the Host Control web service for versions 7.0–7.5. The issue allows remote attackers to cause a denial of service (service crash) via a crafted request (as noted in SAP Security Note 2389181). The available references confirm the DoS impa...