CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2388

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.582

EPSS Ranking 98.1%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

Proposed Action

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.

Ransomware Campaign

Unknown

References

Products affected by CVE-2016-2388

Sap » Netweaver Application Server Java » Version: 7.10

cpe:2.3:a:sap:netweaver_application_server_java:7.10
Sap » Netweaver Application Server Java » Version: 7.11

cpe:2.3:a:sap:netweaver_application_server_java:7.11
Sap » Netweaver Application Server Java » Version: 7.20

cpe:2.3:a:sap:netweaver_application_server_java:7.20
Sap » Netweaver Application Server Java » Version: 7.21

cpe:2.3:a:sap:netweaver_application_server_java:7.21
Sap » Netweaver Application Server Java » Version: 7.22

cpe:2.3:a:sap:netweaver_application_server_java:7.22
Sap » Netweaver Application Server Java » Version: 7.30

cpe:2.3:a:sap:netweaver_application_server_java:7.30
Sap » Netweaver Application Server Java » Version: 7.31

cpe:2.3:a:sap:netweaver_application_server_java:7.31
Sap » Netweaver Application Server Java » Version: 7.40

cpe:2.3:a:sap:netweaver_application_server_java:7.40
Sap » Netweaver Application Server Java » Version: 7.45

cpe:2.3:a:sap:netweaver_application_server_java:7.45
Sap » Netweaver Application Server Java » Version: 7.49

cpe:2.3:a:sap:netweaver_application_server_java:7.49
Sap » Netweaver Application Server Java » Version: 7.50

cpe:2.3:a:sap:netweaver_application_server_java:7.50

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2388

Products

Pricing

Contact Us