Known Exploited Vulnerabilities June 09, 2022 · CISA KEV Catalog

CVE-2016-2386: SAP Net Weaver SQL Injection Vulnerability

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2016-2386 SAP
Related: CVE-2025-42999: SAP Net Weaver Deserialization Vulnerability Known Exploited Vulnerabilities · May 15, 2025
CVE-2025-31324: SAP Net Weaver Unrestricted File Upload Vulnerability Known Exploited Vulnerabilities · Apr 29, 2025
CVE-2017-12637: SAP Net Weaver Directory Traversal Vulnerability Known Exploited Vulnerabilities · Mar 19, 2025