Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-40168
HistoryMar 16, 2023 - 12:00 a.m.

SAP NetWeaver AS Path Traversal Vulnerability

2023-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
sap netweaver
path traversal
vulnerability
attackers
overwrite
system files
sap software
platform

0.001 Low

EPSS

Percentile

32.5%

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. SAP NetWeaver AS suffers from a path traversal vulnerability that arises when a network system or product fails to properly filter special elements in the path of a resource or file. An attacker could exploit this vulnerability to overwrite operating system files, rendering the system unusable.

0.001 Low

EPSS

Percentile

32.5%

Related for CNVD-2023-40168