CVE-2016-4015: High severity sap netweaver vulnerability
Published Apr 14, 2016
·Updated
The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.
Affected Software
4 affected components
SAP NetWeaver=7.1
SAP NetWeaver=7.2
SAP NetWeaver=7.3
SAP NetWeaver=7.4
Event History
Apr 14, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4015?
CVE-2016-4015 is classified as a medium severity vulnerability that allows for denial of service attacks.
2
How do I fix CVE-2016-4015?
To fix CVE-2016-4015, update your SAP NetWeaver JAVA AS to a version that addresses this vulnerability as specified in SAP Security Note 2258784.
3
Which versions of SAP NetWeaver are affected by CVE-2016-4015?
CVE-2016-4015 affects SAP NetWeaver JAVA AS versions 7.1 through 7.4.
4
What type of attack is possible with CVE-2016-4015?
CVE-2016-4015 allows remote attackers to cause a denial of service by sending a crafted request that leads to a process crash.
5
Is CVE-2016-4015 a remote vulnerability?
Yes, CVE-2016-4015 is a remote vulnerability that can be exploited without prior authentication.