Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1497451-2)
SAP Support Packages
(SAPK-60209INSEMBW, SAPK-60308INSEMBW, SAPK-60409INSEMBW, SAPK-60502INSEMBW, SAPK-63401INSEMBW, SAPK-70013INSEMBW, SAPKGS4026, SAPKGS6019)
Описание
The problem occurs due to an SQL injection issue. In the code, an SQL statement is composed of strings, and an attacker can gain control over the content of a substring. This means that the resulting overall statement can be manipulated and data can be changed in the database, or the database can be prompted to disclose additional data.
Как исправить
Implement the corrections.
Ссылки
