CVE-2010-2347

MEDIUM 4.9CVE-2010-2347 · Published 21/06/2010 · updated 16/06/2026

In short

CVE-2010-2347 is a MEDIUM (CVSS 4.9) vulnerability affecting j2ee engine core (sap), server core (sap).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
j2ee engine core sap	`= 6.40= 7.00= 7.01= 7.02`	No fix yet
server core sap	`= 7.10= 7.11= 7.20= 7.30`	No fix yet

Description

The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.

References

archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html
secunia.com/advisories/40223 · Vendor Advisory
onapsis.com/resources/get.php
securityfocus.com/archive/1/511855/100/0/threaded
securityfocus.com/bid/40916
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/59502
service.sap.com/sap/support/notes/1425847

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free