CVE-2016-3685: sap download manager – CVSS 4.7 · Watchpost