CVE-2016-3976 1

Vulnerability (CVE)

CVE-2016-3976: SAP Net Weaver Directory Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

SAP NetWeaver Application Server Java Platforms contains a directory traversal vulnerability via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet. This allows remote attackers to read files.

Vulnerabilities & Patching