CVE-2016-1910

5.3 mediumEPSS 6.5%

Medium (5.3) in sap netweaver. EPSS 6.5% chance of exploitation in the next 30 days.

The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 6.5% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:netweaver

References

http://seclists.org/fulldisclosure/2016/Apr/60
http://www.securityfocus.com/bid/80920
https://erpscan.io/advisories/erpscan-16-003-sap-netweaver-7-4-cryptographic-issues/
https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/
https://www.exploit-db.com/exploits/43495/

Check your stack JSON