VULNERABILITY INTELLIGENCE

CVE-2016-2389

CVSS score7.8 HIGH

EPSS probability41.45%

CISA KEVNot currently listed

Published2016-02-16

Last modified2026-06-17

Description

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the Path parameter to /Catalog, aka SAP Security Note 2230978.