Description
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 30 Jun 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.