CVE-2016-2388—SAP NetWeaver Information Disclosure Vulnerability

PUBLISHEDvulnerability record
2022-06-09 · last modified June 21, 2025

Metadata

CVE ID：
CVE-2016-2388
项目：
SAP
产品：
NetWeaver
添加日期：
2022-06-09
到期日：
2022-06-30
最后更新：
June 21, 2025

漏洞名称

SAP NetWeaver Information Disclosure Vulnerability

描述

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.

已知用于勒索软件活动吗？

勒索软件状态：
Unknown

采集行动

Apply updates per vendor instructions.

其他说明

  • https://nvd.nist.gov/vuln/detail/CVE-2016-2388

相关 CWE

browse all CVEs