CVE-2015-4158
Published Jun 2, 2015SAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2121661.
Vendor/product archive
sap / netweaver_java_application_server CVEs
Beta · best-effort5 CVEs tagged to sap / netweaver_java_application_server — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2015-2282
Published Jun 2, 2015Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2015-2278
Published Jun 2, 2015The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Se…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2014-8590
Published Nov 4, 2014XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted…
CVE-2014-3133
Published Apr 30, 2014SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified we…
Showing 1-5 of 5 CVEsPage 1 of 1