CVE-2016-2388

The Universal Worklist Configuration in SAP NetWeaver 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.

CVE-2016-2389

Directory traversal vulnerability in the Manufacturing Integration and Intelligence (xMII) component in SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2230978.

Redaxo CMS contains multiple vulnerabilities

Posted by LSE-Advisories on Feb 16

=== LSE Leading Security Experts GmbH – Security Advisory 2016-01-18 ===

Redaxo CMS contains multiple vulnerabilities
————————————————————-

Problem Overview
================
Technical Risk: high
Likelihood of Exploitation: medium
Vendor: https://www.redaxo.org/
Tested version: Redaxo CMS v5.0.0
Credits: LSE Leading Security Experts GmbH employee Tim Herres
Advisory URL:…