Description
Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without proper file format validation, leading to Unrestricted File Upload.
CVSS breakdown
CVSS 3.0
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- SAP_SE / SAP NetWeaver AS JAVA< 7.31 – < 7.31
- SAP_SE / SAP NetWeaver AS JAVA< 7.40 – < 7.40
- SAP_SE / SAP NetWeaver AS JAVA< 7.50 – < 7.50