← Back to browse · API

CVE-2021-38163

Severity
CRITICAL
CVSS
9.9
EPSS
0.36018
Risk score
77.21
CISA KEV
Yes
PoC
No
Published
2022-06-09
Modified
2022-06-09
First seen
2026-08-07
Aliases
EUVD-2021-24633, GHSA-PX4V-WJ8P-CQ36
Products
SAP SE:SAP NetWeaver (Visual Composer 7.0 RT) 7.30, SAP SE:SAP NetWeaver (Visual Composer 7.0 RT) 7.31, SAP SE:SAP NetWeaver (Visual Composer 7.0 RT) 7.40, SAP SE:SAP NetWeaver (Visual Composer 7.0 RT) 7.50, SAP:NetWeaver
Sources
euvd EUVD-2021-24633
cisa.gov CVE-2021-38163

Description

SAP NetWeaver contains a vulnerability that allows unrestricted file upload.

References