CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-14
SAP NetWeaver Visual Composer Remote Code Execution (RCE) and File Upload Vulnerability Advisory (CVE-2021-38163)
[Affected Scope] SAP NetWeaver (Visual Composer 7.0 RT) versions 7.30, 7.31, 7.40, and 7.50
[Impact] An authenticated non-administrative attacker can upload malicious files and execute arbitrary OS commands with the privileges of the Java Server process, leading to full system compromise or denial of service
[Mitigation] Immediately apply the official patch specified in SAP Security Note 3084487 and restrict access to vulnerable upload endpoints