Skip to contentSap Netweaver Application Server vulnerabilities
- sap netweaver application server javaXML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows...CVE-2017-114576.5 Medium
- sap netweaver application server javaThe Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote...CVE-2017-89138.8 High
- sap netweaver application server javaSQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP...CVE-2017-77178.8 High
- sap netweaver application server javaThe SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to...CVE-2016-103046.5 Medium
- sap netweaver, netweaver application server java +1 moreBC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML...CVE-2016-9563In KEVEPSS 24.2%6.5 Medium
- sap netweaver application server javaSAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer...CVE-2016-95627.5 High
- sap netweaver, netweaver application server java +1 moreThe Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does...CVE-2010-5326In KEVEPSS 17.8%10.0 Critical
- sap netweaver application server javaThe XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization,...CVE-2015-88408.8 High
- sap netweaver, netweaver application server java +1 moreDirectory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-3976In KEVPublic exploitEPSS 47.3%7.5 High
- sap netweaver application server javaCross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-39756.1 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1...CVE-2016-3974Public exploitEPSS 14.4%9.1 Critical
- sap netweaver application server javaThe chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java...CVE-2016-39735.3 Medium
- sap netweaver, netweaver application server java +1 moreThe Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to...CVE-2016-2388In KEVPublic exploitEPSS 52.2%5.3 Medium
- sap netweaver, netweaver application server java +1 moreSQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote...CVE-2016-2386In KEVPublic exploitEPSS 71.5%9.8 Critical
- sap netweaver application server javaXML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to...CVE-2015-40917.5 High