CVE-2017-11459

—

CVSS 3.0

9.8 critical

EPSS

2%p83

Published

Jul 25, 2017 (Jul 25, 2017)

Modified

Jun 17, 2026

Description

SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592.

Vendors: sap
Products: trex
Weakness: CWE-94
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.