Sap Netweaver AS For Java vulnerabilities

3 vulnerabilities

Known vulnerabilities in Sap Netweaver AS For Java, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2023-26460sapnetweaver_application_server_for_java+1
EPSS score
0.48%
Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that require user identity9.8CVE-2023-0017sapnetweaver_application_server_for_java+1
EPSS score
15.73%
An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current system. This could allow the attacker to have full read access to user data, make modifications to user data, and make services within the system unavailable.9.9CVE-2023-23857sapnetweaver_application_server_for_java+1
EPSS score
0.54%
Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services across systems. On a successful exploitation, the attacker can read and modify some sensitive information but can also be used to lock up any element or operation of the system making that it unresponsive or unavailable.