CVE-2017-16678
CVE-2017-16678
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Dec 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application.
Affected products
SAP · SAP NetWeaver Knowledge Management Configuration ServiceWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →