CVE-2016-2388 SAP NetWeaver
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
- CVSS
- not scored
On CISA’s exploited list
SAP NetWeaver Information Disclosure Vulnerability
- Added
- 2022-06-09
- Federal patch deadline
- 2022-06-30
- Ransomware use
- not known