Known vulnerabilities in SAP NetWeaver AS JAVA - page 2

Vendor: SAP
Software: SAP NetWeaver AS JAVA
Software CPE: cpe:2.3:a:sap:netweaver_as_java:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 33
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP NetWeaver AS JAVA SAP NetWeaver AS JAVA is affected by 33 known vulnerabilities: 1 critical, 3 high, 16 medium, 13 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100241 - Missing Authorization
CVE-2024-42372		 CWE-862 Medium
No
No
 - 12.11.2024 SB2024111251
#VU96986 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45283		 CWE-200 Low
No
No
 - 10.09.2024 SB2024091022
#VU96982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45280		 CWE-79 Low
No
No
 - 10.09.2024 SB2024091013
#VU95818 - Improper Access Control
CVE-2024-34688		 CWE-284 Medium
No
No
 - 13.08.2024 SB2024081347
#VU83340 - Exposure of sensitive information to an unauthorized actor
CVE-2023-42480		 CWE-200 Medium
No
No
 - 21.11.2023 SB2023112120
#VU81973 - Server-Side Request Forgery (SSRF)
CVE-2023-42477		 CWE-918 Medium
No
No
 - 12.10.2023 SB2023101284
#VU80691 - Memory corruption
CVE-2023-40308		 CWE-119 Medium
No
No
 - 12.09.2023 SB2023091261
SB2023092234
SB2023092235
and 5 more
#VU80681 - Improper Authentication
CVE-2023-40309		 CWE-287 High
No
No
 - 12.09.2023 SB2023091261
SB2023092234
SB2023092235
and 5 more
#VU78958 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22536		 CWE-444 Critical
Available
Exploited
 - 04.08.2023 SB2022021025
#VU78830 - Improper input validation
CVE-2023-31405		 CWE-20 Medium
No
No
 - 01.08.2023 SB2023080125
#VU75138 - Improper Access Control
CVE-2023-24527		 CWE-284 Low
No
No
 - 14.04.2023 SB2023041450
SB2023071717
#VU75119 - Missing Authorization
CVE-2022-41272		 CWE-862 High
No
No
 - 14.04.2023 SB2023041423
#VU56487 - Improper Authorization
CVE-2021-37535		 CWE-285 High
No
No
 - 14.09.2021 SB2021091402


Showing elements 21 - 40 out of 33