Netweaver Application Server Java vulnerabilities

15 known vulnerabilities in Netweaver Application Server Java from SAP. 13 are rated high or critical, and 7 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SAP NetWeaver AS Java: Uncontrolled Resource Consumption

  CVE-2024-34688Jun 11, 2024SAP

  Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may prevent legitimate users from accessing it. This can result in no impact on confidentiality and integrity

• 9.1 Critical severity

  SAP NetWeaver AS Java (Administrator Log…: Improper Neutralization of Special Elements used in a Command

  CVE-2024-22127Mar 12, 2024SAPEPSS 1.59%

  SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands

• 7.5 High severity

  SAP NetWeaver AS Java (Guided Procedures): Improper Restriction of XML External Entity Reference

  CVE-2024-24743Feb 13, 2024SAP

  SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them.

• 8.8 High severity

  SAP NetWeaver AS Java (User Admin Application): Improper Neutralization of Input During Web Page Generation

  CVE-2024-22126Feb 13, 2024SAP

  The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading t

• 9.8 Critical severity

  SAP CommonCryptoLib: Incorrect Authorization

  CVE-2023-40309Sep 12, 2023SAP

  SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired,

• 7.5 High severity

  SAP CommonCryptoLib: Out-of-bounds Write

  CVE-2023-40308Sep 12, 2023SAP

  SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view

• 7.5 High severity

  SAP NetWeaver Application Server Java: Use After Free

  CVE-2022-22533Feb 9, 2022SAPEPSS 1.52%

  Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such tha

• 9.8 Critical severity

  SAP NetWeaver Application Server Java: Inconsistent Interpretation of HTTP Requests

  CVE-2022-22532Feb 9, 2022SAPEPSS 2.06%

  In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer

• 10.0 Critical severity

  SAP NetWeaver Missing Authentication for Critical Function Exploited

  CVE-2020-6287Jul 14, 2020SAPEPSS 94.7%

  SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java s

• 7.5 High severity

  SAP NetWeaver Directory Traversal Exploited

  CVE-2017-12637Aug 7, 2017SAPEPSS 95.1%

  Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 201

• 6.5 Medium severity

  SAP NetWeaver XML External Entity (XXE) Exploited

  CVE-2016-9563Nov 23, 2016SAPEPSS 24.2%

  BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909.

• 10.0 Critical severity

  SAP NetWeaver Remote Code Execution Exploited

  CVE-2010-5326May 13, 2016SAPEPSS 17.8%

  The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, a

• 7.5 High severity

  SAP NetWeaver Directory Traversal Exploited

  CVE-2016-3976Apr 7, 2016SAPEPSS 47.3%

  Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971.

• 5.3 Medium severity

  SAP NetWeaver Information Disclosure Exploited

  CVE-2016-2388Feb 16, 2016SAPEPSS 52.2%

  The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.

• 9.8 Critical severity

  SAP NetWeaver SQL Injection Exploited

  CVE-2016-2386Feb 16, 2016SAPEPSS 71.5%

  SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2101079.