CISA/NIST NVD Alert - CVE-2021-38163

NetWeaver - SAP NetWeaver Unrestricted File Upload vulnerability

CISA/NIST Known Exploited Vulnerability Alert

CVE Identification Number

CVE-2021-38163

Vendor Name

SAP

Product

NetWeaver

Vulnerability Name

SAP NetWeaver Unrestricted File Upload vulnerability

Description of Vulnerability

SAP NetWeaver contains a vulnerability that allows unrestricted file upload.

Date Added to CISA Known Exploited Vulnerability Database

2022-06-09

Remediation

Apply updates per vendor instructions.

Link to NIST NVD CVE Listing

National Vulnerability Database Source