SAP NetWeaver AS JAVA (LM Configuration Wizard) vulnerabilities

1 known vulnerability in SAP NetWeaver AS JAVA (LM Configuration Wizard) from SAP. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  SAP NetWeaver Missing Authentication for Critical Function Exploited

  CVE-2020-6287Jul 14, 2020SAPEPSS 94.7%

  SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java s