[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5_0IgGi_fmrTJ9-C-8Wos26X4s42-JmfwnoVVWk8c_s":3,"g5a-ex:sap\u002Fnetweaver_process_integration@*":147,"g5a-family:sap\u002Fnetweaver_process_integration":149},{"success":4,"data":5},true,{"product":6,"versions":50,"topVulnerabilitiesByEpss":65,"kevVulnerabilities":124,"seoMetadata":125,"meta":144},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":49},"sap","netweaver_process_integration",14,21,0,"2024-03-12",[14,18,20,22,24,27,30,33,35,37,39,41,44,46],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"7.0",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"7.1",{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"7.10",12,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"7.11",10,{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"7.20",8,{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},"7.3",{"version":36,"cve_count":26,"kev_count":11,"has_kev":17},"7.30",{"version":38,"cve_count":9,"kev_count":11,"has_kev":17},"7.31",{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},"7.4",{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},"7.40",13,{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},"7.5",{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},"7.50",19,"Netweaver Process Integration by Sap is a technology product with 14 tracked versions and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[51,52,53,54,55,56,57,58,59,60,61,62,63,64],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},{"version":36,"cve_count":26,"kev_count":11,"has_kev":17},{"version":38,"cve_count":9,"kev_count":11,"has_kev":17},{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},[66,74,80,87,91,98,103,109,112,118],{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":17,"epssScore":73},"CVE-2019-0328","ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system.","2019-07-10",7.2,"v3.0","High",0.03422,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":71,"severity":72,"isKev":17,"epssScore":79},"CVE-2019-0315","Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure.","2019-06-12",7.5,0.0143,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":71,"severity":85,"isKev":17,"epssScore":86},"CVE-2019-0282","Several web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the attacker.","2019-04-10",5.3,"Medium",0.01237,{"cveId":88,"description":89,"publishedDate":77,"cvssScore":84,"cvssVersion":71,"severity":85,"isKev":17,"epssScore":90},"CVE-2019-0312","Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.",0.01135,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":96,"severity":72,"isKev":17,"epssScore":97},"CVE-2022-41272","An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search (UDS) of SAP NetWeaver Process Integration (PI) - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data across the entire system. This allows the attacker to have full read access to user data, make limited modifications to user data, and degrade the performance of the system, leading to a high impact on confidentiality and a limited impact on the availability and integrity of the application.\n","2022-12-13",8.6,"v3.1",0.01102,{"cveId":99,"description":100,"publishedDate":77,"cvssScore":101,"cvssVersion":71,"severity":85,"isKev":17,"epssScore":102},"CVE-2019-0305","Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability. Successful exploitation of this vulnerability leads to unwanted modification of user's data.",4.3,0.00886,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":96,"severity":85,"isKev":17,"epssScore":108},"CVE-2021-27618","The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the file uploaded from local source. An attacker could craft a malicious file and upload it to the application, which could lead to denial of service and impact the availability of the application.","2021-05-11",4.9,0.00848,{"cveId":110,"description":111,"publishedDate":106,"cvssScore":107,"cvssVersion":96,"severity":85,"isKev":17,"epssScore":108},"CVE-2021-27617","The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document uploaded from local source. An attacker can craft a malicious XML which when uploaded and parsed by the application, could lead to Denial-of-service conditions due to consumption of a large amount of system memory, thus highly impacting system availability.",{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":71,"severity":85,"isKev":17,"epssScore":117},"CVE-2019-0337","Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting (XSS) vulnerability","2019-08-14",6.1,0.00843,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":122,"cvssVersion":96,"severity":85,"isKev":17,"epssScore":123},"CVE-2021-27599","SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Integration Builder Framework), versions - 7.10, 7.30, 7.31, 7.40, 7.50, allows an attacker to access information under certain conditions, which would otherwise be restricted.","2021-04-14",6.5,0.00809,[],{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Netweaver Process Integration by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Netweaver Process Integration by Sap covering 14 versions with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netweaver Process Integration vulnerabilities, Netweaver Process Integration security, Netweaver Process Integration CVE, Sap Netweaver Process Integration, Netweaver Process Integration threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":130,"@type":131,"name":132,"description":127,"url":133,"manufacturer":134,"applicationCategory":138,"softwareVersion":139,"mainEntity":140},"https:\u002F\u002Fschema.org","SoftwareApplication","Netweaver Process Integration","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fnetweaver_process_integration",{"@type":135,"name":136,"url":137},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","14 versions tracked",{"@type":141,"name":142,"description":143,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Netweaver Process Integration Security Vulnerabilities","Security vulnerabilities affecting Netweaver Process Integration by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":145,"apiVersion":146},"2026-10-18T13:09:03.118Z","3.0",{"rows":148,"total":11,"capped":17,"failed":11},[],[]]