CVE-2016-4015 — SAP Netweaver vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
3.0%
top 13.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SAP Netweaver
Timeline
PublishedApr 14
Latest updateMay 14

Description

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDsap/netweaver4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-49mq-hrjw-247h: The Enqueue Server in SAP NetWeaver JAVA AS 7↗2022-05-14
▶
CVEList
CVE-2016-4015: The Enqueue Server in SAP NetWeaver JAVA AS 7↗2016-04-14
▶
CVE-2016-4015 — SAP Netweaver vulnerability | cvebase