CVE-2016-3980

The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted HTTP request, aka SAP Security Note 2259547.

Affected products

Sap As Java

Sap Application Server Java

≤ 7.4

CVSS 3.0

7.5 HIGH

EPSS

7.1% (94th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2016-04-08