CVE Watch—

CVE-2016-2386

SAP NetWeaver SQL Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

71.5%

p99

KEV

SIM

9 de jun. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

71.5%EPSS · 30 dias71.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

SAP / NetWeaver

Vulnerabilidade

SAP NetWeaver SQL Injection Vulnerability

Adicionado ao KEV

9 de jun. de 2022

Corrigir até

30 de jun. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2016-2386

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-429999.1 CRÍ

96.3%

KEV—79SAP NetWeaver Deserialization Vulnerability87d CVE-2025-3132410.0 CRÍ

99.9%

KEV—80SAP NetWeaver Unrestricted File Upload Vulnerability94d CVE-2017-12637—

99.9%

KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2020-6287—

99.9%

KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2016-2388—

99.0%

KEV—80SAP NetWeaver Information Disclosure Vulnerability—CVE-2016-3976—

98.8%

KEV—80SAP NetWeaver Directory Traversal Vulnerability—