Description
In certain classes of the SAP List Viewer, the system uses dynamic SQL statements unnecessarily. This does not represent an immediate security risk because the way in which the dynamic SQL statements are built cannot be affected by inputs and only a fixed number of instances are possible.
Available fix and Supported packages
- SAP_BASIS | 702 | 702
- SAP_BASIS | 730 | 730
- SAP_BASIS 702 | SAPKB70205 |
- SAP_BASIS 730 | SAPKB73001 |
Affected component
- BC-WD-CMP-ALV-ABA
ALV for ABAP
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1495099
