Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1489734-4)
SAP Support Packages
(SAPK-51017INSCMBASIS, SAPK-70008INSCMBASIS, SAPK-70102INSCMBASIS, SAPKY40022, SAPKY41021, SAPKY50018)
Описание
The problem is caused by an SQL injection vulnerability. The code composes an SQL statement including strings that can be altered by a malicious user. The manipulated SQL statement can then be used to retrieve data from the database.
Как исправить
Implement the attached correction instruction or the relevant Support Packages.
Ссылки
