CVE-2016-3635

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-13 · updated 2026-06-17
Weakness: CWE-284

Description

SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote Function Modules (RFM) by leveraging a connection created from earlier execution of an anonymous RFM included in a Communication Assembly, aka SAP Security Note 2139366.

Affected products

SAP_SE SAP NetWeaver: 7.40

References

http://seclists.org/fulldisclosure/2016/Oct/48
http://www.securityfocus.com/bid/93501
https://www.onapsis.com/research/security-advisories/sap-ucon-security-protection-bypass
http://seclists.org/fulldisclosure/2016/Oct/48
http://www.securityfocus.com/bid/93501
https://www.onapsis.com/research/security-advisories/sap-ucon-security-protection-bypass

Get alerted when CVE-2016-3635 or the next vulnerability affects your stack