https://pwn.watch/i/sap-netweaver-cve-2017-12637 SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string. Added to CISA KEV on 2025-03-19. en Wed, 19 Mar 2025 00:00:00 GMT https://pwn.watch/i/sap-netweaver-cve-2017-12637 https://pwn.watch/i/sap-netweaver-cve-2017-12637#2025-03-19-69de65d0 Wed, 19 Mar 2025 00:00:00 GMT high <p>SAP NetWeaver: NetWeaver Directory Traversal Vulnerability: CISA added CVE-2017-12637 to the KEV catalog (due 2025-04-09).</p>