CVE-2015-7239: SQL Injection
Published Sep 18, 2015
·Updated
SQL injection vulnerability in the BPFINDJOBSWITHPROGRAM function module in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
1 affected component
SAP NetWeaver J2EE Engine=7.40
Event History
Sep 18, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7239?
CVE-2015-7239 has a high severity rating due to its potential for remote code execution through SQL injection.
2
How do I fix CVE-2015-7239?
To fix CVE-2015-7239, apply the latest security updates provided by SAP for the NetWeaver J2EE Engine 7.40.
3
What software is affected by CVE-2015-7239?
CVE-2015-7239 affects SAP NetWeaver J2EE Engine version 7.40.
4
What type of attack does CVE-2015-7239 facilitate?
CVE-2015-7239 facilitates SQL injection attacks, allowing attackers to execute arbitrary SQL commands.
5
Can CVE-2015-7239 be exploited remotely?
Yes, CVE-2015-7239 can be exploited remotely by attackers targeting the vulnerability through unspecified vectors.