{"cvss":0.0,"datePublished":"2022-06-09","dateUpdated":"2022-06-09","description":"The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.","dueDate":"2022-06-30","id":"CVE-2016-2388","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-2388","product":"NetWeaver","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"SAP NetWeaver Information Disclosure Vulnerability","vendor":"SAP"}