CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
94.2%
SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA(DMIS), versions - 101, 102, 103, 104, 105, allows an authenticated attacker to inject arbitrary code into function module leading to code injection that can be executed in the application which affects the confidentiality, availability and integrity of the application.
Vendor | Product | Version | CPE |
---|---|---|---|
sap | sap_as_abap\(dmis\) | 2011_1_620 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2011_1_620:*:*:*:*:*:*:* |
sap | sap_as_abap\(dmis\) | 2011_1_640 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2011_1_640:*:*:*:*:*:*:* |
sap | sap_as_abap\(dmis\) | 2011_1_700 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2011_1_700:*:*:*:*:*:*:* |
sap | sap_as_abap\(dmis\) | 2011_1_710 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2011_1_710:*:*:*:*:*:*:* |
sap | sap_as_abap\(dmis\) | 2011_1_730 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2011_1_730:*:*:*:*:*:*:* |
sap | sap_as_abap\(dmis\) | 2011_1_731 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2011_1_731:*:*:*:*:*:*:* |
sap | sap_as_abap\(dmis\) | 2011_1_752 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2011_1_752:*:*:*:*:*:*:* |
sap | sap_as_abap\(dmis\) | 2020 | cpe:2.3:a:sap:sap_as_abap\(dmis\):2020:*:*:*:*:*:*:* |
sap | sap_s4_hana\(dmis\) | 101 | cpe:2.3:a:sap:sap_s4_hana\(dmis\):101:*:*:*:*:*:*:* |
sap | sap_s4_hana\(dmis\) | 102 | cpe:2.3:a:sap:sap_s4_hana\(dmis\):102:*:*:*:*:*:*:* |
[
{
"product": "SAP AS ABAP(DMIS)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 2011_1_620"
},
{
"status": "affected",
"version": "< 2011_1_640"
},
{
"status": "affected",
"version": "< 2011_1_700"
},
{
"status": "affected",
"version": "< 2011_1_710"
},
{
"status": "affected",
"version": "< 2011_1_730"
},
{
"status": "affected",
"version": "< 2011_1_731"
},
{
"status": "affected",
"version": "< 2011_1_752"
},
{
"status": "affected",
"version": "< 2020"
}
]
},
{
"product": "SAP S4 HANA(DMIS)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 101"
},
{
"status": "affected",
"version": "< 102"
},
{
"status": "affected",
"version": "< 103"
},
{
"status": "affected",
"version": "< 104"
},
{
"status": "affected",
"version": "< 105"
}
]
}
]
More
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
94.2%