| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver | = 707= 737= 747= 757 |
In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient (administrative) privileges then potentially critical OS files can be overwritten making the system unavailable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free