| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver | = 600= 602= 603= 604= 605= 606= 617= 618= 800= 802= 803= 804= 805= 806= 807 |
Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. On successful exploitation, the attacker can read or modify the system data as well as shut down the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free