← CVE Intelligence

CVE-2024-33006

File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform PUBLISHED

Description (CNA)

An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system. 

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP NetWeaver Application Server ABAP and ABAP Platformaffected SAP_BASIS 700; affected SAP_BASIS 701; affected SAP_BASIS 702; affected SAP_BASIS 731; affected SAP_BASIS 740; affected SAP_BASIS 750; affected SAP_BASIS 751; affected SAP_BASIS 752; affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected SAP_BASIS 758

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.