Sap Netweaver As Java الثغرات

التسلسل الزمني

النسخة

7.5024
7.3115
7.4015
7.3013
7.2010

معالجة

Official Fix18
Temporary Fix0
Workaround1
Unavailable0
Not Defined24

قابلية الاستغلال

High3
Functional0
Proof-of-Concept2
Unproven0
Not Defined38

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent3
Network40

توثيق

Not Defined0
High6
Low12
None25

تفاعل المستخدم

Not Defined0
Required10
None33

C3BM Index

السنة السابقة

CVSSv3 Base

≤10
≤20
≤30
≤44
≤54
≤614
≤710
≤87
≤93
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤45
≤53
≤615
≤79
≤88
≤92
≤101

VulDB

≤10
≤20
≤32
≤44
≤510
≤69
≤78
≤88
≤91
≤101

NVD

≤10
≤20
≤30
≤40
≤53
≤64
≤78
≤88
≤91
≤102

CNA

≤10
≤20
≤30
≤40
≤51
≤64
≤72
≤80
≤93
≤102

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k0
<2k0
<5k4
<10k18
<25k20
<50k0
<100k1
≥100k0

إكسبلويت اليوم

<1k10
<2k5
<5k12
<10k14
<25k2
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

السنة السابقة

🔴 CTI النشاطات

Affected Versions (13): 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50

Link to Product Website: https://www.sap.com

نوع البرنامج: Solution Stack Software

منشورBaseTempالثغرة0dayاليومق�معالجةCTICVE
09/04/20247.57.4SAP NetWeaver AS Java User Management Engine User Admin Application تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-27899
12/03/20248.18.0SAP NetWeaver AS Java Administrator Log Viewer Plug-In تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2024-22127
13/02/20246.56.4SAP NetWeaver AS Java User Admin Application سكربتات مشتركة$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-22126
13/02/20246.96.8SAP NetWeaver AS Java Guided Procedures XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-24743
14/11/20234.54.4SAP NetWeaver AS Java Logon Application الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-42480
10/10/20236.96.8SAP NetWeaver AS Java GRMG Heartbeat Application تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-42477
12/09/20238.58.4SAP CommonCryptoLib تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-40309
11/04/20235.35.2SAP NetWeaver AS Java for Deploy Service Directory API توثيق ضعيف$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-24527
14/03/20235.35.2SAP NetWeaver AS Java Object Analyzing Service تجاوز الصلاحيات$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-27268
27/01/20234.04.0SAP NetWeaver AS JAVA HTTP Request الكشف عن المعلومات$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2021-33687

33 بعض الادخالات لم يتم عرضها

المزيد من الادخالات بحسب Sap

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!