Skip to content

CVE-2017-7717 SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified....

HighCVSS 8.8 EPSS 1.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2356504.

Affected products

ProductAffected versionsFixed in
sap netweaver application server java = 7.40 No fix listed

References

  • 100168 third-party-advisory vdb-entry
  • 95364 third-party-advisory vdb-entry
  • erpscan.io third-party-advisory