Sap Netweaver As For Java vulnerabilities

CVE-2023-0017 [CRITICAL] CWE-284 CVE-2023-0017: An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access cont An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current system. This could allow the attacker to have full re

CVE-2023-23857 [HIGH] CWE-287 CVE-2023-23857: Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthentic Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services across systems. On a successful exploitation, the attacker

CVE-2022-41262 [MEDIUM] CWE-79 CVE-2022-41262: Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenticated attacker to inject a script into a web request header. On successful exploitation, an attacker can view or modify information causing a limited impact on the confidentiality and integrity of the application.

CVE-2023-26460 [MEDIUM] CWE-284 CVE-2023-26460: Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perfo Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that require user identity