CVE-2020-26838 (GCVE-0-2020-26838)
Vulnerability from cvelistv5 – Published: 2020-12-09 16:31 – Updated: 2024-08-04 16:03
VLAI?
Summary
SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it.
Severity ?
9.1 (Critical)
CWE
- Code Injection
Assigner
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| SAP SE | SAP Business Warehouse |
Affected:
< 700
Affected: < 701 Affected: < 702 Affected: < 731 Affected: < 740 Affected: < 750 Affected: < 751 Affected: < 752 Affected: < 753 Affected: < 754 Affected: < 755 Affected: < 782 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T16:03:22.812Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://launchpad.support.sap.com/#/notes/2983367"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "SAP Business Warehouse",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "\u003c 700"
},
{
"status": "affected",
"version": "\u003c 701"
},
{
"status": "affected",
"version": "\u003c 702"
},
{
"status": "affected",
"version": "\u003c 731"
},
{
"status": "affected",
"version": "\u003c 740"
},
{
"status": "affected",
"version": "\u003c 750"
},
{
"status": "affected",
"version": "\u003c 751"
},
{
"status": "affected",
"version": "\u003c 752"
},
{
"status": "affected",
"version": "\u003c 753"
},
{
"status": "affected",
"version": "\u003c 754"
},
{
"status": "affected",
"version": "\u003c 755"
},
{
"status": "affected",
"version": "\u003c 782"
}
]
},
{
"product": "SAP BW4HANA",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "\u003c 100"
},
{
"status": "affected",
"version": "\u003c 200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Code Injection",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-12-09T16:31:14",
"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
"shortName": "sap"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://launchpad.support.sap.com/#/notes/2983367"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cna@sap.com",
"ID": "CVE-2020-26838",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "SAP Business Warehouse",
"version": {
"version_data": [
{
"version_name": "\u003c",
"version_value": "700"
},
{
"version_name": "\u003c",
"version_value": "701"
},
{
"version_name": "\u003c",
"version_value": "702"
},
{
"version_name": "\u003c",
"version_value": "731"
},
{
"version_name": "\u003c",
"version_value": "740"
},
{
"version_name": "\u003c",
"version_value": "750"
},
{
"version_name": "\u003c",
"version_value": "751"
},
{
"version_name": "\u003c",
"version_value": "752"
},
{
"version_name": "\u003c",
"version_value": "753"
},
{
"version_name": "\u003c",
"version_value": "754"
},
{
"version_name": "\u003c",
"version_value": "755"
},
{
"version_name": "\u003c",
"version_value": "782"
}
]
}
},
{
"product_name": "SAP BW4HANA",
"version": {
"version_data": [
{
"version_name": "\u003c",
"version_value": "100"
},
{
"version_name": "\u003c",
"version_value": "200"
}
]
}
}
]
},
"vendor_name": "SAP SE"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it."
}
]
},
"impact": {
"cvss": {
"baseScore": "9.1",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Code Injection"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079",
"refsource": "MISC",
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079"
},
{
"name": "https://launchpad.support.sap.com/#/notes/2983367",
"refsource": "MISC",
"url": "https://launchpad.support.sap.com/#/notes/2983367"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
"assignerShortName": "sap",
"cveId": "CVE-2020-26838",
"datePublished": "2020-12-09T16:31:14",
"dateReserved": "2020-10-07T00:00:00",
"dateUpdated": "2024-08-04T16:03:22.812Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D495F997-45A9-4C80-841E-781E1EAC3074\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2FCA6F5A-25B8-46E1-B407-38F61222C057\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FE999EE-9B6B-4D2C-9347-5558B878AE7B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"00732AD2-BEED-4C1F-AC39-46E6F33CBB5E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC7DABAD-36FA-49D7-8C3C-3AA49604BE37\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"526C11C6-B67D-49F1-94E6-A324AA581EDD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A4E38AC-5888-4ABD-AAB1-BC5312701195\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8D7A93A1-3D65-4C79-92B1-E433EE443478\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E03381-893C-4646-9150-303AB4F6144B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1400B8E5-8400-420A-8581-9F3B07EF6BF4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2ABE173B-C66E-4A69-9735-E325C0DAC062\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:business_warehouse:782:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"929A4FB3-BEEF-4A69-B77C-FD1A0B3C7DFF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:bw\\\\/4hana:100:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BCD13072-E149-45FB-BD46-E3D48D81216B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sap:bw\\\\/4hana:200:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"704134B4-A642-488F-94B3-48A744C46A1A\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it.\"}, {\"lang\": \"es\", \"value\": \"SAP Business Warehouse, versiones: 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782 y SAP BW4HANA, versiones: 100, 200 permite a un atacante autenticado con (altos) privilegios de desarrollador enviar una petici\\u00f3n dise\\u00f1ada para generar y ejecutar c\\u00f3digo sin ser necesario una interacci\\u00f3n del usuario. Es posible dise\\u00f1ar una petici\\u00f3n que resultar\\u00e1 en una ejecuci\\u00f3n de comandos del Sistema Operativo conllevando a una vulnerabilidad de Inyecci\\u00f3n de C\\u00f3digo que podr\\u00eda comprometer completamente la confidencialidad, integridad y disponibilidad del servidor y cualquier dato u otras aplicaciones que se ejecuten en \\u00e9l\"}]",
"id": "CVE-2020-26838",
"lastModified": "2024-11-21T05:20:22.507",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 9.1, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.3, \"impactScore\": 6.0}], \"cvssMetricV30\": [{\"source\": \"cna@sap.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 9.1, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.3, \"impactScore\": 6.0}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:C/I:C/A:C\", \"baseScore\": 9.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2020-12-09T17:15:31.620",
"references": "[{\"url\": \"https://launchpad.support.sap.com/#/notes/2983367\", \"source\": \"cna@sap.com\", \"tags\": [\"Permissions Required\"]}, {\"url\": \"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079\", \"source\": \"cna@sap.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://launchpad.support.sap.com/#/notes/2983367\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Permissions Required\"]}, {\"url\": \"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "cna@sap.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-78\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-26838\",\"sourceIdentifier\":\"cna@sap.com\",\"published\":\"2020-12-09T17:15:31.620\",\"lastModified\":\"2024-11-21T05:20:22.507\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it.\"},{\"lang\":\"es\",\"value\":\"SAP Business Warehouse, versiones: 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782 y SAP BW4HANA, versiones: 100, 200 permite a un atacante autenticado con (altos) privilegios de desarrollador enviar una petici\u00f3n dise\u00f1ada para generar y ejecutar c\u00f3digo sin ser necesario una interacci\u00f3n del usuario. Es posible dise\u00f1ar una petici\u00f3n que resultar\u00e1 en una ejecuci\u00f3n de comandos del Sistema Operativo conllevando a una vulnerabilidad de Inyecci\u00f3n de C\u00f3digo que podr\u00eda comprometer completamente la confidencialidad, integridad y disponibilidad del servidor y cualquier dato u otras aplicaciones que se ejecuten en \u00e9l\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.3,\"impactScore\":6.0}],\"cvssMetricV30\":[{\"source\":\"cna@sap.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.3,\"impactScore\":6.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:C/I:C/A:C\",\"baseScore\":9.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D495F997-45A9-4C80-841E-781E1EAC3074\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FCA6F5A-25B8-46E1-B407-38F61222C057\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FE999EE-9B6B-4D2C-9347-5558B878AE7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00732AD2-BEED-4C1F-AC39-46E6F33CBB5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC7DABAD-36FA-49D7-8C3C-3AA49604BE37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"526C11C6-B67D-49F1-94E6-A324AA581EDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A4E38AC-5888-4ABD-AAB1-BC5312701195\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D7A93A1-3D65-4C79-92B1-E433EE443478\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E03381-893C-4646-9150-303AB4F6144B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1400B8E5-8400-420A-8581-9F3B07EF6BF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2ABE173B-C66E-4A69-9735-E325C0DAC062\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:business_warehouse:782:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"929A4FB3-BEEF-4A69-B77C-FD1A0B3C7DFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:bw\\\\/4hana:100:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCD13072-E149-45FB-BD46-E3D48D81216B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:bw\\\\/4hana:200:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"704134B4-A642-488F-94B3-48A744C46A1A\"}]}]}],\"references\":[{\"url\":\"https://launchpad.support.sap.com/#/notes/2983367\",\"source\":\"cna@sap.com\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079\",\"source\":\"cna@sap.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://launchpad.support.sap.com/#/notes/2983367\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…