NVD

Id
22468  
Name
CVE-2016-9832  
Description
PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-27  
Seq
2016-9832  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119217 22468 CVE-2016-9832 http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html  View
119218 22468 CVE-2016-9832 20161209 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security  View
119219 22468 CVE-2016-9832 http://www.securityfocus.com/archive/1/539883/30/0/threaded  View
119220 22468 CVE-2016-9832 20161207 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security  View
119221 22468 CVE-2016-9832 94733  View

Related JVN