Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-2389
HistoryFeb 16, 2016 - 3:59 p.m.

Directory traversal

2016-02-1615:59:00
PRIOn knowledge base
www.prio-n.com
1

7 High

AI Score

Confidence

Low

0.221 Low

EPSS

Percentile

96.5%

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a … (dot dot) in the Path parameter to /Catalog, aka SAP Security Note 2230978.

CPENameOperatorVersion
netweavereq7.40

7 High

AI Score

Confidence

Low

0.221 Low

EPSS

Percentile

96.5%