CVE-2017-12637
HIGH KEV NUCLEISAP NetWeaver Application Server Java 7.5 - Local File Inclusion
Title source: nucleiExploitation Summary
CVE-2017-12637 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 19, 2025. EIP tracks 1 public exploit from researchers including abrewer251. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a Python-based scanner for CVE-2017-12637, which exploits a directory traversal vulnerability in SAP NetWeaver to retrieve /etc/passwd. The script automates the detection of LFI by sending crafted HTTP requests and checking for the presence of the root user entry.
Description
Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657.
Exploits (1)
This repository contains a Python-based scanner for CVE-2017-12637, which exploits a directory traversal vulnerability in SAP NetWeaver to retrieve /etc/passwd. The script automates the detection of LFI by sending crafted HTTP requests and checking for the presence of the root user entry.
Nuclei Templates (1)
http.favicon.hash:-266008933
icon_hash=-266008933
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N