CVE-2013-7364

State: Published
Severity: Not scored
Published: Apr 10, 2014
Updated: Sep 16, 2024
Reserved: Apr 10, 2014

Description

An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20130222 [Onapsis Security Advisory 2013-004] SAP J2EE Core Service Arbitrary File Accessmailing-list
https://service.sap.com/sap/support/notes/1682613
http://scn.sap.com/docs/DOC-8218
http://www.onapsis.com/get.php?resid=adv_onapsis-2013-004
http://www.onapsis.com/research-advisories.php

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.