- Vendor / Project
- SAP
- Product
- NetWeaver
- Date added
- Jun 9, 2022
- Due date
- Jun 30, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-200
Description
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
Required action
Apply updates per vendor instructions.