Lucene search
+L

CVE-2021-38163

🗓️ 14 Sep 2021 12:15:10Reported by GoogleType 
osv_cve
 osv_cve
🔗 osv.dev👁 11 Views

Authenticated non-admins can upload a malicious file to NetWeaver Visual Composer, enabling operating system commands.

Related
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Path Traversal in Sap Netweaver
10 Sep 202203:41
–githubexploit
attackerkb
attackerkb
CVE-2021-38163
14 Sep 202112:15
–attackerkb
bdu_fstec
BDU FSTEC
SAP NetWeaver Visual Composer Privilege Escalation Command Injection
13 Oct 202100:00
–bdu_fstec
circl
Circl
CVE-2021-38163
14 Sep 202116:21
–circl
cisa_kev
CISA KEV Catalog
SAP NetWeaver Unrestricted File Upload Vulnerability
9 Jun 202200:00
–cisa_kev
cnnvd
CNNVD
SAP NetWeaver 路径遍历漏洞
14 Sep 202100:00
–cnnvd
checkpoint_advisories
Check Point Advisories
SAP NetWeaver Unrestricted File Upload (CVE-2021-38163)
20 Jun 202200:00
–checkpoint_advisories
cve
CVE
CVE-2021-38163
14 Sep 202111:21
–cve
cvelist
Cvelist
CVE-2021-38163
14 Sep 202111:21
–cvelist
kitploit
Kitploit
CVE-2021-38163
19 Oct 202602:35
–kitploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 May 2026 08:35Current
7.3High risk
Vulners AI Score7.3
CVSS 3.18.8
EPSS0.36898
11