CVE-2016-3980

High

Published: 08/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Java Startup Framework (jstart) in SAP JAVA AS versions 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted HTTP request.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operations, potentially leading to service outages and loss of application availability.

Recommendation

It is recommended to upgrade to the latest version of SAP JAVA AS to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in SAP JAVA AS 7.2 to 7.4

CVE-2016-3979High
The Internet Communication Manager (ICM) in SAP JAVA AS versions 7.2 to 7.4 allows remote attackers to cause a denial of service through heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function.

Original NVD description (English source)

The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted HTTP request, aka SAP Security Note 2259547.