QID 87471

SAP NetWeaver Application Server Java - versions 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs which leads to Remote Code Execution.

Affected Versions
SAP NetWeaver AS JAVA Versions - 7.01, 7.02, 7.30, 7.31, 7.33, 7.54

QID Detection Logic(s):
Scan initiates HTTP request on Web Server and determines version based on the Server Header.

Successful exploitation of this vulnerability may allows an attacker to exploit insufficient validation of path information provided by users which leads to Remote Code Execution.