CVE-2017-11459

9.8 criticalEPSS 2.4%

Critical (9.8) in sap trex. EPSS 2.4% chance of exploitation in the next 30 days.

SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2017-07-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:trex

References

https://erpscan.io/advisories/erpscan-17-019-sap-trex-rce/
https://erpscan.io/advisories/erpscan-17-019-sap-trex-rce/

Check your stack JSON