CVE-2017-12637highunder attackCWE-22

CVE-2017-12637

Published · Updated

Follow this CVE+ Monitor SAP NetWeaver

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.5epss 95%
from disclosure to weapon2907 days
Published on NVDAug 7
1st PoC+2907d
CISA KEV+2781d
Action required by CISAfederal deadline: 2025-04-09

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A flaw in SAP NetWeaver allows attackers to read any file on the server by using special path sequences (like ../) in web requests. This exposes sensitive information stored on the server.

Technical detail

Directory traversal vulnerability in the scheduler UI JavaScript component (CWE-22) permits unauthenticated remote attackers to traverse the file system and read arbitrary files by injecting path traversal sequences in the query string. No authentication or special conditions are required; successful exploitation results in unauthorized information disclosure.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.