CVE-2021-38163

SAP NetWeaver's unrestricted file upload vulnerability allows attackers to upload arbitrary files, potentially leading to system compromise and data exfiltration.

A vulnerability in SAP NetWeaver allows unrestricted file uploads, enabling attackers to potentially execute malicious code or compromise sensitive data; DIB organizations using NetWeaver must immediately patch and review file upload configurations to prevent exploitation and maintain CMMC compliance.

Shame score — The unrestricted file upload represents a significant design flaw with potentially severe consequences, demonstrating a lack of basic security controls.