Skip to content

CVE-2016-9562 SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer exception and icman outage) via an HTTPS request to the sap.com~P4TunnelingApp!web/myServlet URI, aka SAP S...

HighCVSS 7.5 EPSS 4.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer exception and icman outage) via an HTTPS request to the sap.com~P4TunnelingApp!web/myServlet URI, aka SAP Security Note 2313835.

Affected products

ProductAffected versionsFixed in
sap netweaver application server java = 7.40 No fix listed

References

  • 92418 third-party-advisory vdb-entry
  • 95363 third-party-advisory vdb-entry
  • erpscan.io third-party-advisory