CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2016-23885.3/MEDIUMEPSS 52.2%CISA KEV

2016-02-16

SAP NetWeaver AS JAVA Universal Worklist Information Disclosure Vulnerability (CVE-2016-2388)

[Affected Scope] SAP NetWeaver AS JAVA version 7.4 utilizing the Universal Worklist (UWL) configuration.

[Impact] Unauthenticated remote attackers can obtain sensitive user information and system configuration details via crafted HTTP requests.

[Mitigation] Apply SAP Security Note 2256846 immediately and restrict external access to UWL-related endpoints.