Product

sap NetWeaver AS Java for Classload Service vulnerabilities

1 published CVE affecting sap NetWeaver AS Java for Classload Service, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest sap NetWeaver AS Java for Classload Service CVEs

Newest publication first

CVE-2023-24526 Improper Access Control in SAP NetWeaver AS Java (Classload Service)
Published 2023-03-14

MediumCVSS 5.3 EPSS 0.58%

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

sap NetWeaver AS Java for Classload Service vulnerabilities

Latest sap NetWeaver AS Java for Classload Service CVEs

CVE-2023-24526 Improper Access Control in SAP NetWeaver AS Java (Classload Service)