Описание
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
Ссылки
- Permissions Required
- Vendor Advisory
- ExploitThird Party Advisory
- US Government Resource
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sap:netweaver:7.5:*:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.13868
Средний
9.1 Critical
CVSS3
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 9.1
github
больше 1 года назад
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
CVSS3: 9.1
fstec
больше 1 года назад
Уязвимость функции MetadataUploader инструмента Visual Composer программной интеграционной платформы SAP NetWeaver, позволяющая нарушителю выполнить произвольный код
EPSS
Процентиль: 96%
0.13868
Средний
9.1 Critical
CVSS3
Дефекты
CWE-502