CVE-2016-4015

High

Published: 14/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Enqueue Server in SAP NetWeaver JAVA AS versions 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operations, potentially leading to downtime in critical services.

Recommendation

It is recommended to update to the latest version of SAP NetWeaver JAVA AS and monitor logs for suspicious requests.

Other vulnerabilities in SAP NetWeaver JAVA AS

CVE-2016-4014High
The XXE vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a system hang by sending a crafted DTD in an XML request to uddi/api/replication.

Original NVD description (English source)

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.