Skip to content
OpenAdvisories
Critical · 9.6 CVE-2024-33006 EUVD-2024-30751GHSA-rpjh-2px8-r4m7

File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform

Published May 14, 2024 · Updated Dec 16, 2025 · Assigned by sap

Description

An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system. 

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 700, SAP_BASIS 701 , SAP_BASIS 702 , SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 —

Advisories 2

References