{"id":"CVE-2017-12637","kind":"vulnerability","aliases":["CVE-2017-12637"],"related":[],"title":"sap netweaver application server java: Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver…","description":"SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"SAP NetWeaver Application Server Java has a directory traversal flaw in one of its scheduler UI JavaScript files, reachable through the query string. A remote attacker can read arbitrary files on the server, which can expose configuration files and credentials.","severity":"high","cvss":7.5,"epss":null,"exploited":true,"exploited_at":"2025-03-19T00:00:00+00:00","products":[{"name":"SAP NetWeaver","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"sap netweaver application server java","fixed":[],"affected":"= 7.50","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","java","sap netweaver","self-hosted","vendor"],"not_affected_if":["no-netweaver","not-java-stack"],"how_to_check":null,"fix":"Apply the vendor mitigation from SAP for CVE-2017-12637, or discontinue use of the product if mitigations are unavailable (per CISA KEV required action).","status":"open","published_at":"2017-08-07T20:29:01+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:48:57+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-23T20:48:57Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor mitigation from SAP for CVE-2017-12637, or discontinue use of the product if mitigations are unavailable (per CISA KEV required action).","reach":"internet","summary":"SAP NetWeaver Application Server Java has a directory traversal flaw in one of its scheduler UI JavaScript files, reachable through the query string. A remote attacker can read arbitrary files on the server, which can expose configuration files and credentials.","category":"vendor","who_cares":["sap netweaver","java","self-hosted"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Remote attacker reads arbitrary server files, including secrets and configuration.","analyst_note":"Find the SAP security note and affected release list for CVE-2017-12637 and the exact scheduler path check; sources give no versions or commands.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-java-stack","no-netweaver"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000444,"input_tokens":2579,"output_tokens":372,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':117C '-12637':16A,19A '-2017':15A,18A '22':116C 'action':107C 'allow':89C 'appli':108C 'applic':3A,37B,77C,114C 'application':24A 'arbitrari':63B,95C 'attack':60B,92C 'bod':115C 'cisa':105C 'cloud':120C 'configur':71B 'contain':81C 'credenti':74B 'cve':14A,17A 'directori':6A,42B,83C 'discontinu':123C 'dot':99C,100C 'exploit':27B 'expos':70B 'file':52B,64B,72B,96C 'flaw':44B 'follow':113C 'guidanc':118C 'host':33B 'instruct':112C 'java':5A,26A,28B,39B,80C 'javascript':51B 'mitig':109C,129C 'netweav':2A,13A,30B,36B,76C 'netweaver':21A,23A 'one':46B 'per':110C 'product':127C 'queri':56B,103C 'reachabl':53B 'read':62B,94C 'remot':59B,91C 'requir':106C 'sap':1A,12A,20A,22A,29B,35B,75C 'schedul':49B 'scheduler/ui/js/ffffffffbca41eb4/uiutiljavascriptjs':10A,87C 'self':32B 'self-host':31B 'server':4A,25A,38B,67B,78C 'servic':121C 'string':57B,104C 'travers':7A,43B,84C 'ui':50B 'unavail':131C 'use':124C 'vendor':34B,111C 'via':97C 'vulner':8A,85C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2017-08-07T20:29:01+00:00","kev":{"dateAdded":"2025-03-19","dueDate":"2025-04-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2017-12637","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12637","severity":null,"published_at":"2025-03-19T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T11:39:14+00:00","note":null},{"source":"nvd","external_id":"CVE-2017-12637","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12637","severity":null,"published_at":"2017-08-07T20:29:01+00:00","modified_at":"2026-06-17T01:03:42+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}