Vulnerabilities > CVE-2017-9844 - Deserialization of Untrusted Data vulnerability in SAP Netweaver 7400.12.21.30308

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
sap
CWE-502
critical
NVD
Published: 2017-07-12
Updated: 2024-11-21

Summary

SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in a request to metadatauploader, aka SAP Security Note 2399804.

Vulnerable Configurations

Part Description Count
Application
Sap
1

Common Weakness Enumeration (CWE)

References