CVE-2016-10005

CWE-200 — Information Exposure3 documents3 sources
Severity
7.5HIGH
EPSS
1.0%
top 23.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SAP Solution Manager
Timeline
PublishedDec 19
Latest updateMay 14

Description

Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDsap/solution_manager7.1, 7.20, 7.31+2

🔴Vulnerability Details

2
GHSA
GHSA-vpq2-pmx3-pq7h: Webdynpro in SAP Solman 7↗2022-05-14
▶
CVEList
CVE-2016-10005: Webdynpro in SAP Solman 7↗2016-12-19
▶
CVE-2016-10005 (HIGH CVSS 7.5) | Webdynpro in SAP Solman 7.1 through | cvebase.io