Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)
SAP NetWeaver AS Java
37 nota sejak Januari 2023.
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
| Hari Tampalan | Nota | Tajuk | Keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP) | CVSS |
|---|---|---|---|---|
| Ogos 2026 | 3758318 | Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) | Sederhana | 6.3 |
| Julai 2026 | 3748227 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard) | Tinggi | 8.2 |
| Jun 2026 | 3727078 | Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) | Kritikal | 9.0 |
| Jun 2026 | 3723655 | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) | Sederhana | 6.1 |
| April 2026 | 3719397 | Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) | Sederhana | 6.1 |
| Februari 2026 | 3673213 | CRLF Injection vulnerability in SAP NetWeaver Application Server Java | Rendah | 3.4 |
| November 2025 | 3643603 | Information Disclosure vulnerability in SAP NetWeaver Application Server Java | Sederhana | 5.3 |
| September 2025 | 3643865 | Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service) | Kritikal | 9.9 |
| September 2025 | 3619465 | Missing Authentication check in SAP NetWeaver Application Server Java | Sederhana | 5.3 |
| September 2025 | 3640477 | Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service) | Sederhana | 4.3 |
| September 2025 | 3525295 | Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service) | Rendah | 3.4 |
| Julai 2025 | 3621771 | Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer) | Kritikal | 9.1 |
| Julai 2025 | 3557179 | Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java | Rendah | 3.5 |
| Mac 2025 | 3567246 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java | Sederhana | 5.4 |
| Februari 2025 | 3526203 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java | Sederhana | 5.4 |
| Februari 2025 | 3550027 | Information Disclosure vulnerability in SAP NetWeaver Application Server Java | Sederhana | 4.3 |
| Januari 2025 | 3540108 | Missing Authorization check in SAP NetWeaver Application Server Java | Sederhana | 6.3 |
| Januari 2025 | 3514421 | Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application) | Sederhana | 4.8 |
| Disember 2024 | 3536965 | Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services) | Kritikal | 9.1 |
| Disember 2024 | 3351041 | XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA | Sederhana | 5.3 |
| November 2024 | 3335394 | Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory) | Sederhana | 6.5 |
| November 2024 | 3393899 | Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application) | Sederhana | 5.3 |
| November 2024 | 3522953 | Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager) | Sederhana | 4.7 |
| September 2024 | 3477359 | Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service) | Sederhana | 6.0 |
| September 2024 | 3505503 | Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application) | Sederhana | 4.8 |
| Jun 2024 | 3460407 | Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository) | Tinggi | 7.5 |
| Jun 2024 | 3425571 | Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) | Sederhana | 5.3 |
| Mac 2024 | 3433192 | Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in) | Kritikal | 9.1 |
| Februari 2024 | 3426111 | XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures) | Tinggi | 8.6 |
| Februari 2024 | 3417627 | Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application) | Sederhana | 6.1 |
| November 2023 | 3366410 | Information Disclosure in NetWeaver AS Java Logon | Sederhana | 5.3 |
| Oktober 2023 | 3333426 | Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application) | Sederhana | 6.5 |
| Julai 2023 | 3324732 | Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) | Sederhana | 5.3 |
| Mac 2023 | 3252433 | Improper Access Control in SAP NetWeaver AS for Java | Kritikal | 9.9 |
| Mac 2023 | 3288096 | Improper Access Control in SAP NetWeaver AS Java (Cache Management Service) | Sederhana | 5.3 |
| Mac 2023 | 3288480 | Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service) | Sederhana | 5.3 |
| Januari 2023 | 3268093 | Improper access control in SAP NetWeaver AS for Java | Kritikal | 9.4 |