Description (CNA)
Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP ABAP Server & ABAP Platform (Translation Tools) | affected < 701; affected < 740; affected < 750; affected < 751; affected < 752; affected < 753; affected < 754; affected < 755; affected < 756; affected < 804 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021
- https://launchpad.support.sap.com/#/notes/3119365
ADP enrichment
No English description supplied.