CVE-2017-12637

⚠ KEVEPSS 93.4%

SAP NetWeaver Directory Traversal Vulnerability

加入 CISA KEV 日:2025/3/19

描述

SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string.

受影響套件(0)

OSV 沒有提供套件對應。