SAP SE SAP Netweaver AS For Java (Http Service) vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP Netweaver AS For Java (Http Service), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3MediumCVE-2021-21492sap se · sap netweaver as for java (http service) +1 moresap se sap netweaver as for java (http service)SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled.EPSS0.56%7.5HighCVE-2021-33670sap se · sap netweaver as for java (http service) +1 moresap se sap netweaver as for java (http service)SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to denial of service vulnerability.EPSS3.16%