Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-55pg-m6v3-xwh9

Опубликовано: 08 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintended commands on the underlying system, posing a significant security risk to the confidentiality, integrity and availability of the application.

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintended commands on the underlying system, posing a significant security risk to the confidentiality, integrity and availability of the application.

EPSS

Процентиль: 43%
0.00207
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 6.7
nvd
10 месяцев назад

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintended commands on the underlying system, posing a significant security risk to the confidentiality, integrity and availability of the application.

CVSS3: 6.7
fstec
10 месяцев назад

Уязвимость программного обеспечения для управления бизнес-процессами SAP ERP BW Business Content, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 43%
0.00207
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-94