CVE-2017-16678

2017-12-1200:00:00

sap

www.cve.org

4.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application.

CNA Affected

[
  {
    "product": "SAP NetWeaver Knowledge Management Configuration Service",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50"
      }
    ]
  }
]