Lucene search
+L

CVE-2016-2387

🗓️ 16 Feb 2016 15:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 75 Views🌐 WEB

Multiple XSS vulns in SAP NetWeaver 7.4 Java Proxy Runtime ProxyServer servlet

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
The vulnerability of the SAP NetWeaver software integration platform allows a hacker to inject any Web or HTML code.
17 Mar 201600:00
–bdu_fstec
cnvd
CNVD
SAP NetWeaver Cross-Site Scripting Vulnerability (CNVD-2016-01150)
18 Feb 201600:00
–cnvd
cvelist
Cvelist
CVE-2016-2387
16 Feb 201615:00
–cvelist
erpscan
erpscan
SAP NetWeaver 7.4 (ProxyServer servlet) - XSS vulnerability
8 Oct 201500:00
–erpscan
euvd
EUVD
EUVD-2016-3471
7 Oct 202500:30
–euvd
nvd
NVD
CVE-2016-2387
16 Feb 201615:59
–nvd
osv
OSV
CVE-2016-2387
16 Feb 201615:59
–osv
packetstorm
Packet Storm
SAP NetWeaver AS JAVA 7.4 Cross Site Scripting
16 May 201600:00
–packetstorm
prion
Prion
Cross site scripting
16 Feb 201615:59
–prion
ptsecurity
Positive Technologies
PT-2016-1281
16 Feb 201600:00
–ptsecurity
Rows per page
NVD
Node
sapnetweaverMatch7.40
ParameterPositionPathDescriptionCWE
nsquery param/ProxyServer/register?ns=myNamespace<img src=a onerror=alert('ERPSCAN')>&interface=&bean=myInterface&method=myMethodXSS in SAP NetWeaver ProxyServer/register via ns parameter (PoC 1).CWE-79
interfacequery param/ProxyServer/register?ns=myNamespace&interface=<img src=a onerror=alert('ERPSCAN')>&bean=myInterface&method=myMethodXSS in SAP NetWeaver ProxyServer/register via interface parameter (PoC 2).CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:43Current
6Medium risk
Vulners AI Score6
CVSS 24.3
CVSS 36.1
EPSS0.01546
75