Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-22127

Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

Description

SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

Default version status: unaffected

  • 7.50affected

References