SAP SE SAP Netweaver (Guided Procedures) vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP Netweaver (Guided Procedures), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

MediumCVE-2020-6187sap_se · sap netweaver (guided procedures) +1 more6y agosap_se sap netweaver (guided procedures)SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service.EPSS0.86%MediumCVE-2023-41367sap_se · sap netweaver (guided procedures) +1 more3y agoMissing Authentication check in SAP NetWeaver (Guided Procedures)Due to missing authentication check in webdynpro application, an unauthorized user in SAP NetWeaver (Guided Procedures) - version 7.50, can gain access to admin view of specific function anonymously. On successful exploitation of vulnerability under specific circumstances, attacker can view user’s email address. There is no integrity/availability impact.EPSS0.55%