{"cvss":0.0,"datePublished":"2022-06-09","dateUpdated":"2022-06-09","description":"SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","dueDate":"2022-06-30","id":"CVE-2016-2386","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-2386","product":"NetWeaver","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"SAP NetWeaver SQL Injection Vulnerability","vendor":"SAP"}