Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:H/AU:S/C:P/I:P/A:CSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1714607-4)
SAP Support Packages
(SAPKB46C65, SAPKB62072, SAPKB64031, SAPKB70027, SAPKB70112, SAPKB70212, SAPKB71016, SAPKB71110, SAPKB72008, SAPKB73008, SAPKB73105)
Описание
The program code contains a possibility to define and execute user-defined code that changes the behavior of the system. A valid and authenticated user is required.Authorization for transaction SE37 is required to execute the injected code.Depending on the code, the user can:inject and run their own code,modify data, delete data,modify the output of the system.
Как исправить
Use the SAP Note Assistant to implement the correction instructions, orimport the relevant Support Package.
Ссылки
