Lucene search

K
cvelistMitreCVELIST:CVE-2016-3976
HistoryApr 07, 2016 - 11:00 p.m.

CVE-2016-3976

2016-04-0723:00:00
mitre
www.cve.org

7.6 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a …\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971.