SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard)
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-6287 | < 7.30 ; < 7.31 ; < 7.40 ; … | SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an | CRITICAL 10.0 | 95 % | KEV | |
| CVE-2020-6286 | < 7.30 ; < 7.31 ; < 7.40 ; … | The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions | MEDIUM 5.3 | 24 % |