H3XA — Operational Evidence

TypeVulnerability

External ID—

First seen2022-06-09

Last seen2022-06-09

Confidence

—

SAP NetWeaver contains a vulnerability that allows unrestricted file upload.

Labels

exploitedkev

CISA KEV context

Vendor / productSAP NetWeaver

Added2022-06-09

Due date2022-06-30

3 recorded

Relationships

mitigates

from Remediate CVE-2021-38163

Mitigation

related-to

to Manipulating Web Input to File System Calls

Technique

related-to

to Relative Path Traversal

Technique

2 external

References

nvd

CVE-2021-38163

cwe

CWE-23