Sploitus

7 exploited vulnerabilities in Sap Netweaver As Java

Vulnerabilities with publicly known exploits

Vendors
Sap
With known exploits
7
Affected Sap Netweaver Application Server Java versions
= 7.30, 7.31, 7.40, 7.50
Affected Sap Netweaver versions
= 7.4

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2020-6287 6 exploits
CVSS 10.0 CRITICAL 2020-07-14FIX AVAILABLE
SAP Unauthenticated WebService User CreationExploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java
CVE-2016-3974 4 exploits
CVSS 9.1 CRITICAL 2016-04-07FIX AVAILABLE
SAP NetWeaver AS JAVA 7.1 < 7.5 - ctcprotocol Servlet XXESAP NetWeaver AS JAVA 7.1 7.5 - ctcprotocol Servlet XML External Entity
CVE-2016-4014 1 exploit
CVSS 9.0 HIGH 2016-04-14FIX AVAILABLE
SAP NetWeaver AS JAVA 7.4 XXE Injection
CVE-2016-3976 4 exploits
CVSS 7.5 HIGH 2015-09-29FIX AVAILABLE
SAP NetWeaver AS JAVA 7.1 < 7.5 - Directory TraversalSAP NetWeaver AS JAVA 7.1 7.5 - Directory Traversal
CVE-2016-3975 1 exploit
CVSS 6.1 MEDIUM 2016-04-07FIX AVAILABLE
SAP NetWeaver AS JAVA 7.5 Cross Site Scripting
CVE-2020-6286 3 exploits
CVSS 5.3 MEDIUM 2020-07-14FIX AVAILABLE
Exploit for Path Traversal in Sap Netweaver_Application_Server_JavaExploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java
CVE-2016-2388 9 exploits
CVSS 5.3 MEDIUM 2016-02-16FIX AVAILABLE
SAP NetWeaver J2EE Engine 7.40 SQL InjectionSAP NetWeaver J2EE Engine 7.40 - SQL Injection Exploit