Description (CNA)
SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / SAP NetWeaver Internet Transaction Server (ITS) | affected from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/102143
- https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/
- https://launchpad.support.sap.com/#/notes/2526781
ADP enrichment
No English description supplied.