CVE-2016-6818 | BDVDB-2026-84213 Detail

Description#

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor response is SAP Security Note 2361633.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/97661
https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-january-2017/

Exploit#

No public exploit known

History#

Version 12017-04-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.