CVE-2016-2388
MEDIUM KEVSAP NetWeaver AS JAVA 7.10-7.50 - Exposure of Sensitive Information via Universal Worklist Configuration
Title source: llmExploitation Summary
CVE-2016-2388 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 9, 2022. EIP tracks 3 public exploits from researchers including Vahagn Vardanyan, ERPScan.
AI-analyzed exploit summary This exploit demonstrates a time-based SQL injection (CVE-2016-2386) in SAP NetWeaver AS Java UDDI 7.11-7.50, leveraging information disclosure (CVE-2016-2388) to retrieve administrator credentials. It uses a SOAP request to extract password hashes via blind SQLi.
Description
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.
Exploits (3)
This exploit demonstrates a time-based SQL injection (CVE-2016-2386) in SAP NetWeaver AS Java UDDI 7.11-7.50, leveraging information disclosure (CVE-2016-2388) to retrieve administrator credentials. It uses a SOAP request to extract password hashes via blind SQLi.
This is a detailed advisory describing an information disclosure vulnerability in SAP NetWeaver AS JAVA 7.1-7.5. The vulnerability allows an anonymous attacker to retrieve a list of SAP users via a specific HTTP request to a WebDynpro resource.
This repository contains a functional Python exploit for CVE-2016-2386, a time-based SQL injection vulnerability in SAP NetWeaver AS Java UDDI 7.11-7.50. The exploit demonstrates the vulnerability by extracting hashed credentials from the UME_STRINGS table and includes detailed technical explanations of the attack vector.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N