What’s Vulnerable › Vulnerabilities
CVE-2024-22127: Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-03-12 · updated 2026-06-17
- Weakness: CWE-77
Description
SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confidentiality, integrity and availability of the application.
Affected products
References
- https://me.sap.com/notes/3433192
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
- https://me.sap.com/notes/3433192
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
Get alerted when CVE-2024-22127 or the next vulnerability affects your stack