Sap Netweaver (Visual Composer 7.0 Rt)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_(visual_composer_7.0_rt):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver (Visual Composer 7.0 Rt) (ed01f686-1460-5ccd-8aaf-e7b104ff4226) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-38163 |
vulnerable | 2026-06-08 05:32:55.580681 |
Details available
CRITICAL (9.9)
SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of running operating system commands with the privilege of the Java Server process. These commands can be used to read or modify any information on the server or shut the server down making it unavailable.
Published: 2021-09-14T11:21:36.000Z
Updated: 2025-10-21T23:25:33.764Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.