SAP NetWeaver Directory Traversal Vulnerability

Mô tả

Tham khảo

• web.archive.org/web/20170807202056/http://www.sh0w.top/index.php/archives/7 · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2017-12637

Lỗ hổng khác của netweaver application server java

• CVE-2026-27674TRUNG BÌNH 6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply c…
• CVE-2026-23686THẤP 3.4Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could s…
• CVE-2025-42926TRUNG BÌNH 5.3SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the…
• CVE-2024-34688CAO 7.5Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the applicat…
• CVE-2024-28164TRUNG BÌNH 5.3SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which wo…