CVE-2016-3635

SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote Function…

published October 13, 2016

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote Function Modules (RFM) by leveraging a connection created from earlier execution of an anonymous RFM included in a Communication Assembly, aka SAP Security Note 2139366.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02444 · 84.1th percentile
Published
2016-10-13T14:00Z
EPSS history
Timeline
  • 13 OCT 14:00Z
    SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote Function…
    cvelistv5