CVEs published December 19, 2016
2 CVEs were published on December 19, 2016: 0 critical, 0 high.
- Published
- 2
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 2
- CVE-2016-2355SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName
- CVE-2016-10005Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~