SAP SE SAP NetWeaver AS JAVA

• CVE-2024-47582 Medium 5.3 XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA 0.4%
• CVE-2024-28164 Medium 5.3 Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) 0.3%
• CVE-2024-34688 High 7.5 Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository) 0.5%
• CVE-2023-42477 Medium 6.5 Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application) 0.5%
• CVE-2020-26826 Medium 6.5 Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without proper file format validation, leading to U 1.2%
• CVE-2020-26820 Critical 9.1 SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the fi 3.9%
• CVE-2020-6263 Medium 6.9 Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7. 1.5%