CVE-2015-7239

SAP NetWeaver J2EE Engine 7.40 - SQL Injection via BP_FIND_JOBS_WITH_PROGRAM Function Module

Title source: llm

Description

SQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References (4)

Core 4

Core References

Third Party Advisory x_refsource_misc

https://erpscan.io/advisories/erpscan-15-021-sap-netweaver-7-4-bp_find_jobs_with_program-sql-injection/

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/537109/100/0/threaded

Mailing List mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2015/Dec/66

Exploit, Third Party Advisory x_refsource_misc

http://packetstormsecurity.com/files/134801/SAP-NetWeaver-J2EE-Engine-7.40-SQL-Injection.html

Scores

EPSS 0.0036

EPSS Percentile 57.9%

Details

CWE

CWE-89

Status published

Products (1)

sap/netweaver_j2ee_engine 7.40

Published Sep 18, 2015

Tracked Since Feb 18, 2026