High severity7.5NVD Advisory· Published Apr 14, 2016· Updated May 6, 2026

CVE-2016-4015

Description

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.

Affected products

SAP/Netweaver4 versions
cpe:2.3:a:sap:netweaver:7.1:*:*:*:java_as:*:*:*+ 3 more
- cpe:2.3:a:sap:netweaver:7.1:*:*:*:java_as:*:*:*
- cpe:2.3:a:sap:netweaver:7.2:*:*:*:java_as:*:*:*
- cpe:2.3:a:sap:netweaver:7.3:*:*:*:java_as:*:*:*
- cpe:2.3:a:sap:netweaver:7.4:*:*:*:java_as:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

erpscan.io/advisories/erpscan-16-019-sap-netweaver-enqueue-server-dos-vulnerability/nvd
erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000