Sap Netweaver As For Java vulnerabilities

CVE-2023-23857 [CRITICAL] CWE-287 CVE-2023-23857: Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthentic Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services across systems. On a successful exploitation, the atta

CVE-2023-26460 [MEDIUM] CWE-284 CVE-2023-26460: Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perfo Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that require user identity

CVE-2023-0017 [CRITICAL] CWE-284 CVE-2023-0017: An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access cont An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current system. This could allow the attacker to have full re