Skip links

Unnecessary database SELECT, SAP security note 1497346

Description

A malicious user can exploit and use specially crafted inputs, resulting in the retrieval of information.

Available fix and Supported packages

  • PI_BASIS | 2004_1_620 | 2004_1_640
  • PI_BASIS | 2005_1_620 | 2005_1_700
  • PI_BASIS | 2006_1_620 | 2006_1_710
  • PI_BASIS | 701 | 702
  • PI_BASIS | 711 | 730
  • PI | 2004_1_46C | 2004_1_46C
  • PI_BASIS 702 | SAPK-70205INPIBASIS |
  • PI_BASIS 711 | SAPK-71106INPIBASIS |
  • PI_BASIS 2005_1_640 | SAPKIPYJ6L |
  • PI_BASIS 2006_1_640 | SAPKIPYL11 |
  • PI_BASIS 2005_1_700 | SAPKIPYJ7N |
  • PI_BASIS 2006_1_700 | SAPKIPYM13 |
  • PI_BASIS 701 | SAPK-70108INPIBASIS |
  • PI_BASIS 2005_1_620 | SAPKIPYJ5M |
  • PI_BASIS 2006_1_620 | SAPKIPYK12 |
  • PI_BASIS 730 | SAPK-73002INPIBASIS |
  • PI_BASIS 2006_1_710 | SAPKIPYN12 |
  • PI 2004_1_46C | SAPKIPZI4J |

Affected component

    CRM-MW-ADP
    Middleware Adapter

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1497346

TAGS

#SQL-injection
#database

How to detect over 4100 vulnerabilities in SAP Systems?

More to explorer

Initiating SAP Penetration Testing

►   Pentest, short for penetration testing, refers to a set of processes that simulate an attacker’s actions to identify security vulnerabilities. Companies

SAP Security Patch Day RedRays

May 2024 SAP Security Patch Day

Vulnerability: Multiple vulnerabilities in SAP CX Commerce SAP Component: CEC-SCC-PLA-PL CVE ID: CVE-2019-17495 CVSS Score: 9.8 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Category: Program error