Netweaver Application Server For Java vulnerabilities
4 known vulnerabilities in Netweaver Application Server For Java from SAP. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
SAP AS NetWeaver JAVA: Missing Authentication for Critical Functionality
In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called wi
- 8.6 High severity
NetWeaver AS for Java: Improper Authentication
Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized opera
- 9.8 Critical severity
NetWeaver AS for Java: Improper Access Control
An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations af
- 7.5 High severity
SAP NetWeaver Application Server for Java: Missing Authorization
An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges.