CVE-2010-2347: The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCOR...

Security readout for executives and security teams

This affects older SAP Java application server components. An authenticated remote user may bypass a Telnet administration security check and use the system in an SMB relay attack. The supplied sources do not show active exploitation or a CVSS score. Exposure is most likely in legacy SAP Java stacks where the Telnet administration interface is reachable by authenticated users. Internet exposure is not stated in the sources. Organizations should treat reachable administrative Telnet services on affected versions as the main review target. Make this an inventory and access-control priority for legacy SAP environments. Urgency increases if affected Telnet administration services are reachable beyond tightly controlled administrator networks or if the SAP version is unsupported. Mitigation focus: Check SAP Note 1425847 and current SAP guidance for fixes or supported mitigations.; Restrict access to SAP J2EE Telnet administration interfaces to trusted administration networks.; Review and remove unnecessary Telnet administration exposure on affected SAP systems..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.