This note was previously released as a functional note. If this note has already been applied to your system no further actions are required.

For Action Email and Message Log, if the character “`” is used in the email body or message text respectively, then generation fails with a syntax error. Also, the mishandling of the character “`” permits a malicious user the execution of arbitrary code. A malicious user can therefore control the behavior of the system, or can potentially escalate privileges by executing malicious code.