File Upload Vulnerability in SAP NetWeaver for Java Application Server

CVE-2019-0327 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation.

Learn more about our Web App Pen Testing.