CVE Watch—

CVE-2016-2388

SAP NetWeaver Information Disclosure Vulnerability

CVSS

—

Sem CVSS

EPSS

52.2%

p99

KEV

SIM

9 de jun. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

52.2%EPSS · 30 dias52.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

SAP / NetWeaver

Vulnerabilidade

SAP NetWeaver Information Disclosure Vulnerability

Adicionado ao KEV

9 de jun. de 2022

Corrigir até

30 de jun. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2016-2388

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-429999.1 CRÍ

96.3%

KEV—79SAP NetWeaver Deserialization Vulnerability87d CVE-2025-3132410.0 CRÍ

99.9%

KEV—80SAP NetWeaver Unrestricted File Upload Vulnerability94d CVE-2017-12637—

99.9%

KEV—80SAP NetWeaver Directory Traversal Vulnerability—CVE-2020-6287—

99.9%

KEV—80SAP NetWeaver Missing Authentication for Critical Function Vulnerability—CVE-2016-2386—

99.4%

KEV—80SAP NetWeaver SQL Injection Vulnerability—CVE-2016-3976—

98.8%

KEV—80SAP NetWeaver Directory Traversal Vulnerability—