EDB-43495
PoCSAP NetWeaver J2EE Engine 7.40 - SQL Injection
view exploit source exploit_dbtype webappsauthor Vahagn Vardanyanpublished 2018-01-10catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-2388US | medium5.3OT critical | KEV | ||
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 225… | ||||
| CVE-2016-2386US | critical9.8OT critical | KEV | ||
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security… | ||||
| CVE-2016-1910US | medium5.3 | Exploit | ||
The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan