A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2016-2386

SAP NetWeaver SQL Injection Vulnerability

Published
2022-06-09
Modified
2026-07-31
Sources
cisa-kev

Summary

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.