CVE-2017-12637

Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

95.11% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2025-03-19

Nuclei

high · CWE-22

Published

2017-08-07

Updated

2025-10-21

Proof-of-concept exploits (1)

• abrewer251/CVE-2017-12637_SAP-NetWeaver-URL-Traversal0★ · 2025-07-23

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12637.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2020-1938
• CVE-2020-3452
• CVE-2022-22536
• CVE-2024-21762
• CVE-2024-38475
• CVE-2025-1302