Medium severity5.3CISA KEVNVD Advisory· Published Feb 16, 2016· Updated Jun 17, 2026
CVE-2016-2388
CVE-2016-2388
Description
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*Range: >=7.10,<=7.50
- Range: =7.4
Patches
Vulnerability mechanics
References
8- packetstormsecurity.com/files/137128/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/145860/SAP-NetWeaver-J2EE-Engine-7.40-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2016/May/55nvdExploitMailing ListThird Party Advisory
- www.exploit-db.com/exploits/39841/nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/43495/nvdExploitThird Party AdvisoryVDB Entry
- erpscan.io/advisories/erpscan-16-010-sap-netweaver-7-4-information-disclosure/nvdBroken LinkThird Party Advisory
- erpscan.io/press-center/blog/sap-security-notes-february-2016-review/nvdBroken LinkThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.