CVE-2016-3976 CISA KEV · Actively exploited
SAP NetWeaver Directory Traversal Vulnerability
CVSS score
—
EPSS probability
%47.3
Risk score
—
Published
5 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
SAP NetWeaver AS JAVA 7.1 < 7.5 - Directory Traversal
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2025-31324 Actively exploitedMissing Authorization check in SAP NetWeaver (Visual Composer development server)
Patch status unknown Public Exploits:10EPSS %99
9.1
CVE-2025-42999 Actively exploitedInsecure Deserialization in SAP NetWeaver (Visual Composer development server)
Workaround Public Exploits:1EPSS %13
9.1
CVE-2026-27690Vulnerability in SAP Approuter
Patch status unknownEPSS %1
8.1
CVE-2026-44745Open redirect in SAP Approuter
Patch status unknownEPSS %0
5.9
CVE-2026-66777Multiple vulnerabilities in SAP Business AI Platform (Approuter)
Patch status unknownEPSS %0
5.9
CVE-2026-58238Multiple vulnerabilities in SAP Business AI Platform (Approuter)
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2016-3976"