netweaver

About this tag
The netweaver tag on WindowsForum.com covers discussions about SAP NetWeaver, particularly focusing on security vulnerabilities and patching. A notable thread addresses a critical vulnerability in SAP NetWeaver AS Java, specifically the LM Configuration Wizard, which allows unauthenticated attackers to take control of trusted SAP applications via HTTP. The content emphasizes the importance of applying patches promptly due to the severity of the risk and the widespread use of SAP business applications. Users seeking information on SAP NetWeaver security updates, vulnerability management, and enterprise IT risk mitigation will find relevant discussions under this tag.
  1. AA20-195A: Critical Vulnerability in SAP NetWeaver AS Java

    Original release date: July 13, 2020 Summary On July 13, 2020 EST, SAP released a Link Removed to address a critical vulnerability, Link Removed, affecting the SAP NetWeaver Application Server (AS) Java component LM Configuration Wizard. An unauthenticated attacker can exploit this...