CVE-2016-4551

EPSS 0.29%
Published 05.10.2016 16:59:02
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

SAP ≫ Netweaver Version2004s

SAP ≫ Sap Aba Version7.00 Updatesp_level_0031

SAP ≫ Sap Basis Version7.00 Updatesp_level_0031

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.29%	0.495

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://seclists.org/fulldisclosure/2016/Oct/3

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/93288

https://www.onapsis.com/research/security-advisories/sap-security-audit-log-invalid-address-logging

Third Party Advisory

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2016-4551

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-4551

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-4551

EUVD