Sap Netweaver Application Server For Java Luki w zabezpieczeniach

Oś czasu

Wersja

7.504
7.212
7.222
7.452
7.492

Przeciwdziałanie

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined6

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent2
Network4

Uwierzytelnianie

Not Defined0
High2
Low2
None2

Interakcja z użytkownikiem

Not Defined0
Required0
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤40
≤50
≤62
≤72
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤40
≤50
≤64
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤32
≤40
≤50
≤60
≤74
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k0
<10k4
<25k2
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k0
<2k2
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (11): 7.11, 7.20, 7.21, 7.22, 7.30, 7.31, 7.40, 7.45, 7.49, 7.50, 7.53

Link to Product Website: https://www.sap.com

Typ oprogramowania: Application Server Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-03-145.35.2SAP NetWeaver Application Server for Java Cache Management Service privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-26460
2022-04-126.36.0SAP NetWeaver Application Server for Java XML Data Archiving Service privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-27669
2021-06-092.72.7SAP NetWeaver Application Server for Java UserAdmin Application information disclosure$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2021-27621
2021-04-144.34.3SAP NetWeaver Application Server for Java NTLM Hash information disclosure$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2021-21485
2019-08-147.57.5SAP NetWeaver Application Server for Java Management Console Credentials privilege escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2019-0345
2019-07-105.85.8SAP NetWeaver Application Server for Java information disclosure$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2019-0318

więcej wpisów autorstwa Sap

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!