Sap Netweaver Java Application Server Vulnerabilidad

Cronología

Versión

7.101
7.111
7.201
7.301
7.311

Contramedidas

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined3

Explotabilidad

High1
Functional0
Proof-of-Concept0
Unproven0
Not Defined2

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network3

Autenticación

Not Defined0
High0
Low1
None2

La interacción del usuario

Not Defined0
Required1
None2

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤80
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤80
≤91
≤100

VulDB

≤10
≤20
≤30
≤41
≤50
≤61
≤70
≤81
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k0
<10k1
<25k1
<50k1
<100k0
≥100k0

Explotar hoy

<1k0
<2k0
<5k1
<10k1
<25k1
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (10): 7.0, 7.1, 7.2, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50

Link to Product Website: https://www.sap.com

Tipo de software: Application Server Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2019-03-124.44.4SAP Netweaver Java Application Server SAML 1.1 SSO Demo Application cross site scripting$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2019-0275
2016-05-138.68.6SAP Netweaver Java Application Server Invoker Servlet Detour escalada de privilegios$5k-$25k$5k-$25kHighNot Defined0.39CVE-2010-5326
2014-04-305.35.3SAP Netweaver Java Application Server escalada de privilegios$25k-$100k$5k-$25kNot DefinedNot Defined0.00CVE-2014-3133

más entradas por Sap

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!