Lucene search
HistoryMay 14, 2024 - 4:17 p.m.
CVE-2024-33006
unauthenticated attacker
malicious file
compromise system
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0
Percentile
9.0%
An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system.
Related
cve
cve
CVE-2024-33006
2024-05-14 16:17:14
nessus
nessus
SAP NetWeaver AS ABAP File Upload Vulnerability (May 2024) (3448171)
2024-05-17 00:00:00
vulnrichment
vulnrichment
cvelist
cvelist
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-33006