CVE-2017-16678 Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an attacke...
MediumCVSS 4.7
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver knowledge management configuration service | All versions | No fix listed |
| sap epbc | >= 7.00, <= 7.02 | No fix listed |
| sap epbc2 | >= 7.00, <= 7.02 | No fix listed |
| sap kmc-bc | = 7.30 | No fix listed |
| sap kmc-bc | = 7.31 | No fix listed |
| sap kmc-bc | = 7.40 | No fix listed |
| sap kmc-bc | = 7.50 | No fix listed |
| SAP NetWeaver Knowledge Management Configuration Service | = EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50 | No fix listed |
References
- 102149 third-party-advisory vdb-entry
- blogs.sap.com vendor-advisory
- launchpad.support.sap.com permissions-required