SAP NetWeaver AS Java のパストラバーサル (CVE-2017-12637)

high Nessus プラグイン ID 233477

Language:

バージョン 1.16 Nov 3, 2025, 9:25 PM Logic Changes (Corrects handling base64 encoded HTTP cookies) Plugin Feed: 202511032125
バージョン 1.15 Oct 27, 2025, 3:15 PM Logic Changes (Gate HTTP debugging behind hidden preference) Plugin Feed: 202510271515
バージョン 1.14 Oct 23, 2025, 3:11 AM Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections) Plugin Feed: 202510230311
バージョン 1.12 Oct 16, 2025, 4:39 PM Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.) Plugin Feed: 202510161639
バージョン 1.10 Oct 8, 2025, 9:19 AM Logic Changes (Allow forking plugins to report all installs for structured vuln data.) Plugin Feed: 202510080919
バージョン 1.9 Oct 1, 2025, 9:12 PM Logic Changes (Adding support for user-supplied header added to all HTTP requests.) Plugin Feed: 202510012112
バージョン 1.8 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
バージョン 1.5 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
バージョン 1.4 Jul 10, 2025, 5:41 PM Logic Changes (Windows CA support) Plugin Feed: 202507101741
バージョン 1.3 Jun 23, 2025, 9:47 PM Logic Changes Plugin Feed: 202506232147
バージョン 1.2 Mar 29, 2025, 4:19 PM CISA reference CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") Plugin Feed: 202503291619
バージョン 1.1 Mar 29, 2025, 3:23 AM New Plugin Feed: 202503290323

* Changelogs are generally available for changes made after Nov 1, 2022