CVE-2016-3975

概要

参考情報

• packetstormsecurity.com/files/137529/SAP-NetWeaver-AS-JAVA-7.5-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2016/Jun/42 · Exploit
• erpscan.io/advisories/erpscan-16-014-sap-netweaver-7-4-navigationurltester · Third Party Advisory
• erpscan.io/press-center/blog/sap-security-notes-march-2016-review · Third Party Advisory

netweaver application server java のその他の脆弱性

• CVE-2026-27674中 6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply c…
• CVE-2026-23686低 3.4Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could s…
• CVE-2025-42926中 5.3SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the…
• CVE-2024-34688高 7.5Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the applicat…
• CVE-2024-28164中 5.3SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which wo…