Posted by ERPScan inc on Dec 16

Application: SAP NetWeaver
Versions Affected: SAP NetWeaver J2EE Engine 7.40
Vendor URL: http://SAP.com
Bugs: SQL injection
Send: 13.07.2015
Reported: 13.07.2015
Vendor response: 14.07.2015
Date of Public Advisory: 14.12.2015
Reference: SAP Security Note 2193389
Author: Vahagn Vardanyan (ERPScan)

Description…