{"id":"CVE-2017-16682","aliases":["EUVD-2017-7866","GHSA-j6f3-f56f-c695"],"status":"published","title":"SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40,...","description":"SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.","severity":{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0159,"percentile":0.75815,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2017-12-12T14:00:00Z","modified":"2026-06-17T01:09:40Z","products":[{"vendor":"sap","product":"business_application_software_integrated_solution"},{"vendor":"sap","product":"netweaver_internet_transaction_server"},{"vendor":"sap","product":"sap netweaver internet transaction server (its)"}],"references":[{"url":"http://www.securityfocus.com/bid/102143","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2526781","tags":["x_refsource_CONFIRM","x_transferred","Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16682"},{"url":"https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017"},{"url":"https://github.com/advisories/GHSA-j6f3-f56f-c695"}],"sources":{"cve":[{"id":"CVE-2017-16682","description":"SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.","status":"published","published":"2017-12-12T14:00:00Z","modified":"2024-09-16T22:39:53.093Z","updated_at":"2026-11-02T14:33:21.453505Z"}],"euvd":[{"id":"EUVD-2017-7866","description":"SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.","status":"published","published":"2017-12-12T14:00:00Z","modified":"2024-09-16T22:39:53Z","updated_at":"2026-11-03T00:55:01.173561Z"}],"ghsa":[{"id":"GHSA-j6f3-f56f-c695","title":"SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40,...","description":"SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.","status":"published","published":"2022-05-14T04:04:13Z","modified":"2025-04-20T03:50:52Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:01:57.295459Z"}],"nvd":[{"id":"CVE-2017-16682","description":"SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.","status":"published","published":"2017-12-12T14:29:00.403Z","modified":"2026-06-17T01:09:40.123Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:04:10.156892Z"}]}}