Skip to contentSap Application Server Java vulnerabilities
- sap netweaver application server java, netweaver as java (servercore) +1 moreBy default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access...CVE-2018-25037.4 High
- sap netweaver application server java, netweaver application server (java library) +1 moreSAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents...CVE-2018-24927.1 High
- sap netweaver as java, netweaver application server java +1 moreThe logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does...CVE-2018-24526.1 Medium
- sap netweaver application server javaThe Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to...CVE-2017-145817.5 High
- sap netweaver, netweaver application server java +1 moreDirectory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP...CVE-2017-12637In KEVPublic exploitEPSS 95.1%7.5 High
- sap netweaver application server javaCross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS...CVE-2017-114586.1 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows...CVE-2017-114576.5 Medium
- sap netweaver application server javaThe Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote...CVE-2017-89138.8 High
- sap netweaver application server javaSQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP...CVE-2017-77178.8 High
- sap netweaver application server javaThe SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to...CVE-2016-103046.5 Medium
- sap netweaver, netweaver application server java +1 moreBC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML...CVE-2016-9563In KEVEPSS 24.2%6.5 Medium
- sap netweaver application server javaSAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer...CVE-2016-95627.5 High
- sap netweaver, netweaver application server java +1 moreThe Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does...CVE-2010-5326In KEVEPSS 17.8%10.0 Critical
- sap application server javaThe Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to...CVE-2016-39807.5 High
- sap netweaver application server javaThe XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization,...CVE-2015-88408.8 High
- sap netweaver, netweaver application server java +1 moreDirectory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-3976In KEVPublic exploitEPSS 47.3%7.5 High
- sap netweaver application server javaCross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-39756.1 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1...CVE-2016-3974Public exploitEPSS 14.4%9.1 Critical
- sap netweaver application server javaThe chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java...CVE-2016-39735.3 Medium
- sap netweaver, netweaver application server java +1 moreThe Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to...CVE-2016-2388In KEVPublic exploitEPSS 52.2%5.3 Medium
- sap netweaver, netweaver application server java +1 moreSQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote...CVE-2016-2386In KEVPublic exploitEPSS 71.5%9.8 Critical
- sap netweaver application server javaXML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to...CVE-2015-40917.5 High