CVE-2017-16682
Severity
7.2HIGH
EPSS
0.5%
top 32.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 12
Latest updateMay 14
Description
SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9
Affected Packages2 packages
▶CVEListV5sap/sap_netweaver_internet_transaction_server_(its)from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52