Input validation

2019-07-1020:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation.

CPENameOperatorVersion
netweaver_application_server_javaeq7.20
netweaver_application_server_javaeq7.30
netweaver_application_server_javaeq7.31
netweaver_application_server_javaeq7.40
netweaver_application_server_javaeq7.50
netweaver_application_server_javaeq7.10

Name	Operator	Version
netweaver_application_server_java	eq	7.20
netweaver_application_server_java	eq	7.30
netweaver_application_server_java	eq	7.31
netweaver_application_server_java	eq	7.40
netweaver_application_server_java	eq	7.50
netweaver_application_server_java	eq	7.10