NetWeaver AS for Java vulnerabilities

2 known vulnerabilities in NetWeaver AS for Java from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  NetWeaver AS for Java: Improper Authentication

  CVE-2023-23857Mar 14, 2023SAP

  Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized opera

• 9.8 Critical severity

  NetWeaver AS for Java: Improper Access Control

  CVE-2023-0017Jan 10, 2023SAPEPSS 15.7%

  An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations af