VendorsSAPnetweaver7.03
Vulnerabilities

SAP Netweaver 7.0 (aka 2004s) 7.03

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2013-3319
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.
Published 2013-08-16 · Modified
5.0EPSS 0.203
CVE-2013-5751
Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors.
Published 2013-09-16 · Modified
5.0EPSS 0.021
CVE-2013-6815
The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue.
Published 2013-11-19 · Modified
5.0EPSS 0.017
CVE-2013-6244
The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published 2013-10-24 · Modified
5.0EPSS 0.016
CVE-2014-3787
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
Published 2014-05-19 · Modified
5.0EPSS 0.014