CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- SAP NetWeaver Directory Traversal Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971.
Affected products
sap: netweaver application server java
References10
- packetstormsecurity.com/files/137528/SAP-NetWeaver-AS-JAVA-7.5-… ExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2016/Jun/40 ExploitMailing ListThird Party Advisory
- www.exploit-db.com/exploits/39996/ ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/137528/SAP-NetWeaver-AS-JAVA-7.5-… ExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2016/Jun/40 ExploitMailing ListThird Party Advisory
- www.exploit-db.com/exploits/39996/ ExploitThird Party AdvisoryVDB Entry
- erpscan.io/advisories/erpscan-16-012/ Third Party Advisory
- erpscan.io/press-center/blog/sap-security-notes-march-2016-revi… Third Party Advisory
- launchpad.support.sap.com/#/notes/2234971 Permissions Required
- erpscan.io/advisories/erpscan-16-012/ Third Party Advisory
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 47% percentile: 99 · as of 8 November 2026
- CWE
- CWE-22
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.