CVE-2016-1910

5.3 MEDIUM

Published: January 15, 2016 Modified: May 06, 2026

Description

The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://seclists.org/fulldisclosure/2016/Apr/60

Source: cve@mitre.org

http://www.securityfocus.com/bid/80920

Source: cve@mitre.org

https://erpscan.io/advisories/erpscan-16-003-sap-netweaver-7-4-cryptographic-issues/

Source: cve@mitre.org

https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/

Source: cve@mitre.org

https://www.exploit-db.com/exploits/43495/

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2016/Apr/60