SAP

Java As

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2016-4016

Exploit
  • EPSS 0.49%
  • Published 14.04.2016 14:59:11
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xapps~xmii~ui...

7.5

CVE-2016-3979

  • EPSS 3.7%
  • Published 08.04.2016 14:59:08
  • Last modified 12.04.2025 10:46:40

Internet Communication Manager (aka ICMAN or ICM) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (heap memory corruption and process crash) via a crafted HTTP request, related to the IctParseCookies function, aka ...