Beveiligingsadvies

CVE-2017-9844

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-07-12 16:00:00
Laatst bijgewerkt 2025-05-01 14:35:03
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in a request to metadatauploader, aka SAP Security Note 2399804. NOTE: The vendor states that the devserver package of Visual Composer deserializes a malicious object that may cause legitimate users accessing a service, either by crashing or flooding the service.