Sap J2ee Engine Sårbarheter

Tidslinje

Version

7.014
7.402

Åtgärd

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined3

Utnyttjbarhet

High1
Functional0
Proof-of-Concept0
Unproven0
Not Defined6

Åtkomstvektor

Not Defined0
Physical0
Local0
Adjacent0
Network7

Autentisering

Not Defined0
High0
Low4
None3

Användarinteraktion

Not Defined0
Required4
None3

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤53
≤61
≤70
≤81
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤53
≤61
≤70
≤81
≤90
≤101

VulDB

≤10
≤20
≤30
≤44
≤50
≤61
≤70
≤81
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤73
≤80
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k0
<2k0
<5k0
<10k4
<25k3
<50k0
<100k0
≥100k0

Utnyttja idag

<1k5
<2k0
<5k1
<10k1
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Versions (2): 7.01, 7.40

Link to Product Website: https://www.sap.com

PubliceradBaseTempSårbarhet0dayI dagUtnRemCTICVE
04/03/20194.84.7SAP J2EE Engine Protocol Reflected cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-17865
04/03/20194.84.7SAP J2EE Engine Protocol Reflected cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2018-17861
04/03/20194.84.7SAP J2EE Engine test2 Reflected cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2018-17862
04/03/20193.53.4SAP J2EE Engine test2 Reflected cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-17864
16/02/20169.19.1SAP NetWeaver J2EE Engine UDDI server sql injektion$5k-$25k$0-$5kHighNot Defined0.06CVE-2016-2386
18/09/20157.37.3SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM sql injektion$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2015-7239
10/04/20145.35.3SAP J2EE Engine informationsgivning$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2013-7357

fler inlägg av Sap

◂ TidigareÖversiktNästa ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!