{"cvss":0.0,"datePublished":"2025-04-22T00:00:00Z","dateUpdated":"2025-04-22T00:00:00Z","description":"SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in a request to metadatauploader, aka SAP Security Note 2399804. NOTE: The vendor states that the devserver package of Visual Composer deserializes a malicious object that may cause legitimate users accessing a service, either by crashing or flooding the service.","dueDate":"","id":"CVE-2017-9844","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"NetWeaver","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"SAP NetWeaver Deserialization of Untrusted Data","vendor":"SAP"}