CVE-2015-2817

MEDIUM 5.0CVE-2015-2817 · Published 01/04/2015 · updated 17/06/2026

In short

CVE-2015-2817 is a MEDIUM (CVSS 5.0) vulnerability affecting netweaver (sap).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netweaver sap	`= 7.40`	No fix yet

Description

The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note 2091768.

References

packetstormsecurity.com/files/132359/SAP-Management-Console-Information-Disclosure.html
seclists.org/fulldisclosure/2015/Jun/65
securityfocus.com/archive/1/535829/100/800/threaded
securityfocus.com/bid/73705
erpscan.io/advisories/erpscan-15-007-sap-management-console-readprofile-parameters-information-disclosure

More vulnerabilities in netweaver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netweaver

sap

= 7.40

No fix yet

More vulnerabilities in netweaver

See all →