Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1387574-6)
SAP Support Packages
(SAPKB70022, SAPKB70023, SAPKB70107, SAPKB70108, SAPKB70205, SAPKB71010, SAPKB71011, SAPKB71105, SAPKB71106, SAPKB72003, SAPKB72004)
Описание
You can use the Persistence Service and Query Service of the Object Services to load persistent objects into the roll area. If a parameter table (parameter I_PARAMETER_TAB of the method GET_PERSISTENT_BY_QUERY of the class actor) is used to transfer the (actual) values for the search condition values to the Query Service, the following problems may occur:
SQL injection
Runtime error SAPSQL_LIKE_QUOTES or SAPSQL_WHERE_QUOTES
SQL injection
Runtime error SAPSQL_LIKE_QUOTES or SAPSQL_WHERE_QUOTES
Как исправить
The runtime environment of the Object Services must ensure that the values are handled correctly. The error is corrected with the specified Support Package. You can also implement the changes in advance using the specified correction instructions.
Ссылки
