What’s Vulnerable › Vulnerabilities

CVE-2017-16682

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-12-12 · updated 2026-06-17
• Weakness: CWE-94

Description

SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.

Affected products

• SAP Business Application Software Integrated Solution: from 7.00 through 7.02; from 7.50 through 7.52; 7.30, 7.31, 7.40
• SAP Netweaver Internet Transaction Server: all versions

References

• http://www.securityfocus.com/bid/102143
• https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/
• https://launchpad.support.sap.com/#/notes/2526781
• http://www.securityfocus.com/bid/102143
• https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/
• https://launchpad.support.sap.com/#/notes/2526781

Get alerted when CVE-2017-16682 or the next vulnerability affects your stack