CVE-2016-4014

PoC ×2—

CVSS 3.0

8.6 high

EPSS

5%p92

Published

Apr 14, 2016 (Apr 14, 2016)

Modified

Jun 17, 2026

Description

XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389.

Vendors: sap
Products: netweaver
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (5.3%)

In the news0 stories

No ingested article mentions this CVE yet.