SAP

Netweaver System Landscape Directory

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2024-42372

  • EPSS 0.09%
  • Published 12.11.2024 01:15:03
  • Last modified 12.11.2024 13:55:21

Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confidentiality and integrity of the application.

9.8

CVE-2018-2368

  • EPSS 3.01%
  • Published 01.03.2018 17:29:00
  • Last modified 21.11.2024 04:03:41

SAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication checks for functionalities that require user identity.