CVE Vulnerability Advisory Database

[Affected Scope] Systems utilizing the SAP NetWeaver Visual Composer Metadata Uploader module

[Impact] A privileged attacker can upload untrusted or malicious content, triggering deserialization of untrusted data (CWE-502) and potentially compromising the confidentiality, integrity, and availability of the host system

[Mitigation] Immediately apply the official security patch (SAP Note 3604119) and restrict access to unauthorized metadata upload endpoints

[Affected Scope] SAP systems utilizing the SAP NetWeaver Visual Composer Metadata Uploader component.

[Impact] Unauthenticated remote attackers can upload malicious executable binaries (such as web shells), leading to complete compromise of system confidentiality, integrity, and availability.

[Mitigation] Immediately apply the official security patch (SAP Note 3594142) and restrict external access to the Metadata Uploader endpoints.

[Affected Scope] SAP NetWeaver (Visual Composer 7.0 RT) versions 7.30, 7.31, 7.40, and 7.50

[Impact] An authenticated non-administrative attacker can upload malicious files and execute arbitrary OS commands with the privileges of the Java Server process, leading to full system compromise or denial of service

[Mitigation] Immediately apply the official patch specified in SAP Security Note 3084487 and restrict access to vulnerable upload endpoints

[Affected Scope] SAP NetWeaver AS JAVA (LM Configuration Wizard) versions 7.30, 7.31, 7.40, and 7.50

[Impact] Unauthenticated remote attackers can execute configuration tasks, create administrative accounts, and fully compromise system confidentiality, integrity, and availability

[Mitigation] Apply SAP Security Note 2934135 immediately or disable/restrict access to the CTC Web Service

[Affected Scope] SAP NetWeaver Application Server Java version 7.5.

[Impact] Unauthenticated remote attackers can read arbitrary system and configuration files by exploiting a directory traversal vulnerability using '..' sequences in the query string.

[Mitigation] Apply SAP Security Note 2486657 immediately, and implement WAF rules to block directory traversal patterns in the interim.

[Affected Scope] BC-BMT-BPM-DSK component in SAP NetWeaver AS JAVA 7.5.

[Impact] Remote authenticated attackers can conduct XML External Entity (XXE) attacks, leading to sensitive local file disclosure, SSRF, or DoS.

[Mitigation] Apply SAP Security Note 2296909 or restrict access to the vulnerable URI endpoint.

[Affected Scope] SAP NetWeaver AS JAVA version 7.4 utilizing the Universal Worklist (UWL) configuration.

[Impact] Unauthenticated remote attackers can obtain sensitive user information and system configuration details via crafted HTTP requests.

[Mitigation] Apply SAP Security Note 2256846 immediately and restrict external access to UWL-related endpoints.

[Affected Scope] UDDI (Universal Description, Discovery, and Integration) server component running on SAP NetWeaver J2EE Engine version 7.40.

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via crafted requests, potentially leading to complete database compromise, data exfiltration, or remote code execution.

[Mitigation] Immediately apply SAP Security Note 2101079, disable the UDDI service if not required, and restrict network access.