Netweaver@- Security Vulnerabilities and Issues — Netweaver@- CVE List

Lucene search

SapNetweaver-

5 matches found

CVE•added 2014/02/14 3:55 p.m.•44 views

CVE-2014-1964

Cross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error.

4.3CVSS5.8AI score0.00329EPSS

CVE•added 2014/06/09 8:55 p.m.•43 views

CVE-2014-4003

The System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system.

7.5CVSS6.4AI score0.01207EPSS

CVE•added 2014/02/14 3:55 p.m.•41 views

CVE-2014-1960

The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.

5CVSS6.3AI score0.00357EPSS

CVE•added 2014/02/14 3:55 p.m.•41 views

CVE-2014-1961

Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors.

5CVSS6.3AI score0.00354EPSS

CVE•added 2014/04/10 8:55 p.m.•39 views

CVE-2013-7364

An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors.

7.5CVSS7AI score0.00675EPSS