VULNERABILITY INTELLIGENCE

CVE-2017-16682

CVSS score7.2 HIGH
EPSS probability1.59%
CISA KEVNot currently listed
Published2017-12-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references