SAP NetWeaver Application Server Java 7.5 Directory traversal vulnerability CVE-2017-12637 Scanner
Details
Stay Up To Date
Follow @secforeveryoneAsset Type
DOMAIN,IP,URL
Need Membership
Yes
Asset Verify
Yes
API Support
Yes
Estimate Time (Second)
15
SAP NetWeaver Application Server Java 7.5 Directory traversal vulnerability CVE-2017-12637 Scanner Detail
SAP NetWeaver Application Server Java 7.5 allows directory traversal vulnerability.
Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657.
Some Advice for Common Problems
You should update to latest version.
