CVE-2016-3684

PoC ×3—

CVSS 3.0

4.7 medium

EPSS

<1%p21

Published

Dec 14, 2016 (Dec 14, 2016)

Modified

Jun 17, 2026

Description

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338.

Vendors: sap
Products: download manager
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.