CVE-2016-10005

Description

Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524.

References

https://erpscan.io/advisories/erpscan-16-035-sap-solman-user-accounts-dislosure/

http://www.securityfocus.com/bid/92949

http://seclists.org/fulldisclosure/2016/Dec/69

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS