Vulnerability Description
SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Netweaver Application Server Java | 7.5 |
Related Weaknesses (CWE)
References
- https://me.sap.com/notes/3433192Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anVendor Advisory
- https://me.sap.com/notes/3433192Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anVendor Advisory
FAQ
What is CVE-2024-22127?
CVE-2024-22127 is a vulnerability with a CVSS score of 9.1 (CRITICAL). SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vu...
How severe is CVE-2024-22127?
CVE-2024-22127 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-22127?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Netweaver Application Server Java.