CVE-2016-2386

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CISA Known Exploited Vulnerability

Vendor / Product SAP — NetWeaver
Date Added 2022-06-09
Remediation Due 2022-06-30
https://nvd.nist.gov/vuln/detail/CVE-2016-2386

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →