Логотип exploitDog
bind:CVE-2025-42926
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-42926

Количество 3

Количество 3

nvd логотип

CVE-2025-42926

5 месяцев назад

SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker could access these files to gather additional sensitive information about the system.This vulnerability has a low impact on confidentiality and does not affect the integrity or availability of the server.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-cwj5-q4hx-xggm

5 месяцев назад

SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker could access these files to gather additional sensitive information about the system.This vulnerability has a low impact on confidentiality and does not affect the integrity or availability of the server.

CVSS3: 5.3
EPSS: Низкий
fstec логотип

BDU:2026-00022

10 месяцев назад

Уязвимость сервера приложений SAP NetWeaver Application Server Java, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить доступ на чтение данных

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-42926

SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker could access these files to gather additional sensitive information about the system.This vulnerability has a low impact on confidentiality and does not affect the integrity or availability of the server.

CVSS3: 5.3
0%
Низкий
5 месяцев назад
github логотип
GHSA-cwj5-q4hx-xggm

SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker could access these files to gather additional sensitive information about the system.This vulnerability has a low impact on confidentiality and does not affect the integrity or availability of the server.

CVSS3: 5.3
0%
Низкий
5 месяцев назад
fstec логотип
BDU:2026-00022

Уязвимость сервера приложений SAP NetWeaver Application Server Java, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить доступ на чтение данных

CVSS3: 5.3
0%
Низкий
10 месяцев назад

Уязвимостей на страницу