| Package | Affected versions | Patched versions |
|---|---|---|
| master data governance (s4core) | = 101 | |
| master data governance (s4fnd) | = 102= 103= 104 | |
| master data governance (sap bs fnd) | = 748 |
The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free