CVE-2016-2386 SAP NetWeaver
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVSS
- not scored
On CISA’s exploited list
SAP NetWeaver SQL Injection Vulnerability
- Added
- 2022-06-09
- Federal patch deadline
- 2022-06-30
- Ransomware use
- not known