CRITICAL🇵🇱 Wersja polska

CVE-2024-22127

CVSS 9.1v3.1pub. 2024-03-12upd. 2025-02-07

SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Sap Netweaver Application Server Java

    APP
    Sap
    7.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-6287CRITICAL10.0⚠ KEVten sam produkt

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authen...

CVE-2010-5326CRITICAL10.0⚠ KEVten sam produkt

The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require ...

CVE-2016-2386CRITICAL9.8⚠ KEVten sam produkt

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to ex...

CVE-2023-40309CRITICAL9.8ten sam produkt

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong aut...

CVE-2022-22532CRITICAL9.8ten sam produkt

In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7....