SAP NetWeaver AS for Java (Http Service)

< 7.10

OTHER 2 CVEs

< 7.30

OTHER 2 CVEs

< 7.11

OTHER 2 CVEs

< 7.50

OTHER 2 CVEs

< 7.31

OTHER 2 CVEs

< 7.20

OTHER 2 CVEs

< 7.40

OTHER 2 CVEs

CVE-2021-33670

SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to denial of service vulnerability.

HIGH Jul 14, 2021

CVE-2021-21492

SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled.

MEDIUM Apr 13, 2021