CVE-2016-2389

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4…

published February 16, 2016

CVSS
—
EPSS
41%
Percentile
98.7
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the Path parameter to /Catalog, aka SAP Security Note 2230978.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.41450 · 98.7th percentile
Published
2016-02-16T15:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 41% → 20%
    epss
  • 06 SEP 03:09Z
    EPSS moved 41% → 20%
    epss
  • 30 AUG 15:31Z
    EPSS moved 20% → 41%
    epss
  • 29 AUG 04:10Z
    EPSS moved 41% → 20%
    epss
  • 16 FEB 15:00Z
    Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4…
    cvelistv5