Solution : https://service.sap.com/sap/support/notes/1589119 (SAP Service marketplace login required)
Summary :
This SAP Note provides corrections for NetWeaver Application Server Java version NW702 SP05 and SP08. It details various updates across ADM, COR, DPL, UME, SEC, SQL, RMT, and WEB components. Key corrections include fixes to Visual Admin UI, server session handling, logging inaccuracies, JNDI bindings, user management issues, security vulnerabilities like XSS, and connection management. Additional references to related SAP Notes are provided for more specific technical guidance on each mentioned fix.
Key words :
standalone log viewer opens arbitrary ports, 1550250web - invalid http requests result, 1558178dpl - introducing startup mode forced_manual, 1550224 - nwa log viewer show, groups returns incomplete results, start/stop j2ee process, 1567668 - server sessions remain open, sso ticket transient attribute, visual admin ui elements, terms j2ee engine
Related Notes :
| 1574196 | SAP Logging API should not try to read big files |
| 1573943 | Too many log files cause OutOfMemoryError in server startup |
| 1568593 | |
| 1566012 | Log Viewer shows "No logs to display" in "Last 24 Hours" |
| 1562064 | Potential denial of service in http provider of Web AS Java |
| 1561976 | Misleading information in NWA when start/stop j2ee process |
| 1558232 | |
| 1558178 | JNDI cannot bind objects from remote clients |
| 1555092 | |
| 1554806 | |
| 1550224 | |
| 1549666 | |
| 1549168 | |
| 1546307 | |
| 1535653 | Introducing startup mode FORCED_MANUAL for services |
| 1510286 | |
| 1412456 | Standalone Log Viewer opens arbitrary ports |
| 1382283 | Longer like match pattern causes unexpected exception |