First published: Tue Mar 08 2022(Updated: )
Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks.
Credit: cna@sap.com
Affected Software | Affected Version | How to fix |
---|---|---|
SAP NetWeaver Application Server Java | =7.50 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2022-26103.
SAP NetWeaver Application Server Java version 7.50 is affected by this vulnerability.
The severity of CVE-2022-26103 is medium, with a severity value of 5.3.
An attacker can exploit CVE-2022-26103 to access information that could be used for further exploits and attacks.
Yes, SAP has provided fixes for this vulnerability. Please refer to the SAP notes and documentation for details.