NetWeaver Process Integration vulnerabilities

2 known vulnerabilities in NetWeaver Process Integration from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  NetWeaver Process Integration: Missing Authorization

  CVE-2022-41272Dec 13, 2022SAPEPSS 1.1%

  An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search (UDS) of SAP NetWeaver Process Integration (PI) - version 7.50 and make use of an open naming and directory API to access services whic

• 9.4 Critical severity

  NetWeaver Process Integration: Missing Authorization

  CVE-2022-41271Dec 13, 2022SAP

  An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unau