漏洞描述 SAP NetWeaver 平台爆出一个严重的漏洞,远程攻击者成功利用后可允许攻击者在目标服务器执行系统命令或造成应用崩溃。此次受到该漏洞影响的包含SAPNetWeaver 7.0以及以前版本。
相关漏洞推荐 POC CVE-2017-12637: SAP NetWeaver Application Server Java 7.5 - Local File Inclusion POC CVE-2020-6287: SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition POC CVE-2021-33690: SAP NetWeaver Development Infrastructure - Server Side Request Forgery POC CVE-2025-31324: SAP NetWeaver Visual Composer Metadata Uploader - Deserialization POC sap-netweaver-backdoor: SAP NetWeaver - Backdoor Detection POC sap-netweaver-portal: SAP NetWeaver Portal - Detect POC sap-nw-webgui: SAP NetWeaver WebGUI Detection SAP Netweaver metadatauploader 远程代码执行漏洞 SAP Netweaver publicinfo CVE-2022-22536请求走私漏洞