ID CVE-2016-4015
Summary The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.
References
Vulnerable Configurations
  • cpe:2.3:a:sap:netweaver:7.1:*:*:*:java_as:*:*:*
    cpe:2.3:a:sap:netweaver:7.1:*:*:*:java_as:*:*:*
  • cpe:2.3:a:sap:netweaver:7.2:*:*:*:java_as:*:*:*
    cpe:2.3:a:sap:netweaver:7.2:*:*:*:java_as:*:*:*
  • cpe:2.3:a:sap:netweaver:7.3:*:*:*:java_as:*:*:*
    cpe:2.3:a:sap:netweaver:7.3:*:*:*:java_as:*:*:*
  • cpe:2.3:a:sap:netweaver:7.4:*:*:*:java_as:*:*:*
    cpe:2.3:a:sap:netweaver:7.4:*:*:*:java_as:*:*:*
CVSS
Base: 5.0 (as of 10-12-2018 - 19:29)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
misc
Last major update 10-12-2018 - 19:29
Published 14-04-2016 - 14:59
Last modified 10-12-2018 - 19:29
Back to Top