high8.8
CVE-2020-6249
The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute…
Impact
The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Master Data Governance \(S4core\) | Version 101 |
| Sap | Master Data Governance \(S4fnd\) | Versions 102, 103, 104 |
| Sap | Master Data Governance \(Sap Bs Fnd\) | Version 748 |