Lucene search
MitreCVELIST:CVE-2016-2386HistoryFeb 16, 2016 - 3:00 p.m.
CVE-2016-2386
2016-02-1615:00:00
mitre
www.cve.org
0.332 Low
EPSS
Percentile
97.1%
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2101079.
References
packetstormsecurity.com/files/137129/SAP-NetWeaver-AS-JAVA-7.5-SQL-Injection.html
seclists.org/fulldisclosure/2016/May/56
erpscan.io/advisories/erpscan-16-011-sap-netweaver-7-4-sql-injection-vulnerability/
erpscan.io/press-center/blog/sap-security-notes-february-2016-review/
github.com/vah13/SAP_exploit
www.exploit-db.com/exploits/39840/
www.exploit-db.com/exploits/43495/
Related
zdt
zdt
SAP NetWeaver AS JAVA 7.1 < 7.5 - SQL Injection
2016-05-19 00:00:00
SAP NetWeaver J2EE Engine 7.40 - SQL Injection Exploit
2018-01-11 00:00:00
attackerkb
attackerkb
CVE-2016-2386
2016-02-16 00:00:00
checkpoint_advisories
checkpoint_advisories
SAP NetWeaver J2EE Engine SQL Injection (CVE-2016-2386)
2022-06-20 00:00:00
cve
cve
CVE-2016-2386
2016-02-16 15:59:00
cisa_kev
cisa_kev
SAP NetWeaver SQL Injection Vulnerability
2022-06-09 00:00:00
prion
prion
Sql injection
2016-02-16 15:59:00
packetstorm
packetstorm
SAP NetWeaver AS JAVA 7.5 SQL Injection
2016-05-19 00:00:00
SAP NetWeaver J2EE Engine 7.40 SQL Injection
2018-01-12 00:00:00
nvd
nvd
CVE-2016-2386
2016-02-16 15:59:00
openvas
openvas
SAP NetWeaver AS Java Multiple Vulnerabilities (2101079, 2191290, 2256846)
2016-05-23 00:00:00
exploitpack
exploitpack
SAP NetWeaver J2EE Engine 7.40 - SQL Injection
2018-01-10 00:00:00
exploitdb
exploitdb
SAP NetWeaver J2EE Engine 7.40 - SQL Injection
2018-01-10 00:00:00