Is CVE-2021-38163 actively exploited?

Yes. CVE-2021-38163 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2021-38163 be exploited remotely?

The attack vector of CVE-2021-38163 has not been classified yet.

What is the CVSS score of CVE-2021-38163?

CVE-2021-38163 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2021-38163

HIGHCISA KEVIN THE WILD

CVE-2021-38163

Published: June 9, 2022

EPSS:84.77%probability of exploitation in 30 daysPercentile:99.3th

Official Description

SAP NetWeaver contains a vulnerability that allows unrestricted file upload.

NVD Source

CISA KEV Advisory

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP NetWeaver contains a vulnerability that allows unrestricted file upload.

Added to KEV: 2022-06-09Federal patch deadline: 2022-06-30

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

This vulnerability in SAP NetWeaver allows for unrestricted file upload, which can lead to various forms of compromise. The high EPSS score of 0.84766 indicates a very high likelihood of exploitation, and its presence in the KEV catalog confirms active exploitation. This is an urgent risk for SAP NetWeaver installations.

This vulnerability is actively being exploited in the wild and is included in CISA's KEV catalog. It is remotely exploitable, allowing attackers to upload arbitrary files to the server.

Recommended Action

Administrators should apply the latest security patches and updates for SAP NetWeaver immediately. Implement strict file upload validation and access controls to prevent unauthorized file uploads.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2021-38163 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2021-38163 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.