CVE-2024-28164

概要

参考情報

• me.sap.com/notes/3425571 · Permissions Required
• support.sap.com/en/my-support/knowledge-base/security-notes-news.html · Vendor Advisory

netweaver application server java のその他の脆弱性

• CVE-2026-27674中 6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply c…
• CVE-2026-23686低 3.4Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could s…
• CVE-2025-42926中 5.3SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the…
• CVE-2024-34688高 7.5Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the applicat…
• CVE-2024-22127緊急 9.1SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload pot…