CVE-2016-2388: SAP NetWeaver Information Disclosure Vulnerability
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution