Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2024-33006

File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system. 

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform

Default version status: unaffected

  • SAP_BASIS 700affected
  • SAP_BASIS 701 affected
  • SAP_BASIS 702 affected
  • SAP_BASIS 731affected
  • SAP_BASIS 740affected
  • SAP_BASIS 750affected
  • SAP_BASIS 751affected
  • SAP_BASIS 752affected
  • SAP_BASIS 753affected
  • SAP_BASIS 754affected
  • SAP_BASIS 755affected
  • SAP_BASIS 756affected
  • SAP_BASIS 757affected
  • SAP_BASIS 758 affected

References