CVE-2016-2386—SAP NetWeaver SQL Injection Vulnerability

PUBLISHEDvulnerability record
2022-06-09 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2016-2386
Project:
SAP
Product:
NetWeaver
Date Added:
2022-06-09
Due Date:
2022-06-30
Last Updated:
June 21, 2025

Vulnerability Name

SAP NetWeaver SQL Injection Vulnerability

Description

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2016-2386

Related Weaknesses

browse all CVEs