Cybersecurity Alerts

SAP NetWeaver SQL Injection Vulnerability

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-89

References

• https://nvd.nist.gov/vuln/detail/CVE-2016-2386