Описание
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.
EPSS
9.9 Critical
CVSS3
Дефекты
Связанные уязвимости
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availability of the system.
Уязвимость платформы управления программными средами SAP Solution Manager, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код
EPSS
9.9 Critical
CVSS3