Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2020-6249

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database que

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP Master Data Governance (S4CORE)

  • < 101affected

SAP SE SAP Master Data Governance (S4FND)

  • < 102affected
  • < 103affected
  • < 104affected

SAP SE SAP Master Data Governance (SAP_BS_FND)

  • < 748affected

References