CVE-2016-3684: sap download manager – CVSS 4.7 · Watchpost