Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

February 11, 2010
2:37 pm

No examples shipped with SAP J2EE Engine 6.40 and 7.0x, SAP security note 1421523

Description

After applying the respective service packs listed below, the examples originally shipped with the J2EE engine are no longer available

Possible path traversal with shipped examples

Available fix and Supported packages

SAP_JTECHS | 6.40 | 6.40
SAP_JTECHS | 7.00 | 7.02
SAP JAVA TECH SERVICES 7.00 | SP022 | 000000
SAP JAVA TECH SERVICES 7.01 | SP007 | 000000
SAP JAVA TECH SERVICES 7.02 | SP003 | 000000

Affected component

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected].

URL

https://launchpad.support.sap.com/#/notes/1421523

TAGS

#example-applications
#j2ee-engine

More to explorer

Urgent Security Notice

Press release: RedRays discovered major cybersecurity leak affects 4800 domains

June 4, 2023

Yerevan, 4 June 2023 – RedRays, a cybersecurity provider specializing in the protection of ERP systems, has recently made a disturbing discovery.

Urgent Security Notice

Urgent Security Notice: RedRays Discloses Major Data Breach Affecting SAP Customers

June 2, 2023

RedRays has made an alarming discovery through their rigorous internet data monitoring and analysis: significant breaches involving user logins and passwords of

[CVE-2021-33690] Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure

June 1, 2023

Application: SAP NetWeaver AS JavaVersions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50Vendor URL:

Exploring P4 Protocol: Usage, Implementation, and CVE-2021-37535

May 24, 2023

Introduction The P4 protocol is important in Java remote communication, mainly with Java Naming and Directory Interface (JNDI) and Java Remote Method