Lucene search
HistoryNov 20, 2013 - 2:12 p.m.
CVE-2013-6814
sap netweaver
j2ee engine
cve-2013-6814
remote attack
phishing
sensitive information
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.9%
The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensitive information (cookies and SAPPASSPORT) via unspecified vectors.
Affected configurations
Node
sapnetweaverRange≤7.02
ORsapnetweaverMatch6.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:netweaver | sap netweaver | le | 7.02 |
| sap:netweaver | sap netweaver | eq | 6.4 |
Related
cvelist
cvelist
CVE-2013-6814
2013-11-19 19:00:00
prion
prion
Design/Logic Flaw
2013-11-20 14:12:00
nvd
nvd
CVE-2013-6814
2013-11-20 14:12:30
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.9%
Related for CVE-2013-6814