CVEvulnerability
CVE-2013-7364
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors.
Affected configurations
• sap netweaver
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0133.html archives.neohapsis.com
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://www.onapsis.com/get.php?resid=adv_onapsis-2013-004 www.onapsis.com
- http://www.onapsis.com/research-advisories.php www.onapsis.com
- https://service.sap.com/sap/support/notes/1682613 service.sap.com
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0133.html archives.neohapsis.com
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://www.onapsis.com/get.php?resid=adv_onapsis-2013-004 www.onapsis.com
- http://www.onapsis.com/research-advisories.php www.onapsis.com
- https://service.sap.com/sap/support/notes/1682613 service.sap.com