SQL Injection in SAP Netweaver J2ee Engine

CVE-2015-7239

SQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.

Affected products

Sap Netweaver_j2ee_engine — versions 7.40
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (x_refsource_MISC)