Description
SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, and SAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP SE SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE)
< 7.10affected< 7.11affected< 7.20affected< 7.30affected< 7.31affected< 7.40affected< 7.50affected
SAP SE SAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS)
< 7.10affected< 7.11affected< 7.20affected< 7.30affected< 7.31affected< 7.40affected< 7.50affected