CVE-2010-2347: SAP j2ee Engine Core

Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days.

The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.

Affected products

• SAP j2ee Engine Core: version 6.40 only; version 7.00 only; version 7.01 only; version 7.02 only
• SAP Server Core: version 7.10 only; version 7.11 only; version 7.20 only; version 7.30 only

Published 2010-06-21. Last modified 2026-06-16.