CVE-2017-12637: Path Traversal

First published: Mon Aug 07 2017(Updated: )

Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657.

Credit: cve@mitre.org cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/first-publish-date
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/last-modified-date
• agent/weakness
• agent/references
• agent/severity
• agent/author
• agent/softwarecombine
• agent/tags
• agent/description
• agent/event
• vendor/sap
• canonical/sap netweaver application server java
• version/sap netweaver application server java/7.50