Beveiligingsadvies

CVE-2020-6253

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-05-12 17:55:06
Laatst bijgewerkt 2024-08-04 08:55:22
Toegewezen door sap
CVSS-score 7.2
Status PUBLISHED

Beschrijving

Under certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL Injection.