CVE-2016-9832

Опубликовано: 10 дек. 2016

Источник: nvd

CVSS3: 9.9

CVSS2: 6.5

EPSS Низкий

Описание

PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report.

Ссылки

http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Dec/33
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/539883/100/0/threaded
http://www.securityfocus.com/archive/1/539883/30/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/94733
Third Party Advisory
VDB Entry
https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security
Permissions Required
http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Dec/33
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/539883/100/0/threaded
http://www.securityfocus.com/archive/1/539883/30/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/94733
Third Party Advisory
VDB Entry
https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pwc:ace-advanced_business_application_programming:8.10.304:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.0726

Низкий

9.9 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-qf6p-46w9-4mmp