Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2xw5-jhrf-jwg8

Опубликовано: 08 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with high privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.

SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with high privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.

EPSS

Процентиль: 65%
0.00491
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.9
nvd
7 месяцев назад

SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with user level privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.

CVSS3: 9.9
fstec
7 месяцев назад

Уязвимость системы планирования ресурсов предприятия SAP S/4HANA и программного средства для управления цепочкой поставок SAP SCM (Characteristic Propagation), связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код и получить несанкционированный доступ к системе

EPSS

Процентиль: 65%
0.00491
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-94