CVE

CVE-2021-38163

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP · NetWeaver

Date added (CISA)

2022-06-09

Remediation due

2022-06-30

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

SAP NetWeaver contains a vulnerability that allows unrestricted file upload.