vulnerability
SAP NetWeaver AS JAVA CVE-2016-2388: Exposure of Sensitive Information to an Unauthorized Actor
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Feb 16, 2016 | Apr 1, 2025 | Apr 1, 2025 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Feb 16, 2016
Added
Apr 1, 2025
Modified
Apr 1, 2025
Description
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.
Solution
sap-netweaver-as-java-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.