PoC Index

CVE-2016-9832

CRITICAL 9.9EPSS 4.0%

PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report.

CVSS v3.0
9.9 CRITICALCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0
6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
4.03% chance of exploitation in the next 30 days, 90th percentile
Published
2016-12-09
Updated
2024-08-06

Proof-of-concept exploits (1)

References

Related