CVE-2017-9844

CVSS 3.1: 7.5 high
EPSS: 6%p92
Published: Jul 12, 2017 · Jul 12, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-9844 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in a request to metadatauploader, aka SAP Security Note 2399804. NOTE: The vendor states that the devserver package of Visual Composer deserializes a malicious object that may cause legitimate users accessing a service, either by crashing or flooding the service.

Vendors: sap

Products: netweaver

Weakness: CWE-502

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news

4 stories

New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework

The Hacker NewsMay 6, 13:53 UTC · May 6, 2025Exploit / PoCExploitedCVE-2017-9844 CVE-2025-31324 CVE-2017-126373 · 1 read

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

Security AffairsApr 30, 00:05 UTC · Apr 30, 2025Exploit / PoCExploitedCVE-2025-31324 CVE-2017-98442

SAP Fixes Critical Vulnerability After Evidence of Exploitation

Infosecurity MagazineApr 25, 16:30 UTC · Apr 25, 2025VulnerabilityCVE-2025-31324 CVE-2017-98442

SAP NetWeaver zero-day allegedly exploited by an initial access broker

Security AffairsApr 25, 15:48 UTC · Apr 25, 2025Exploit / PoCCVE-2025-31324 CVE-2017-98442