CVE-2017-16682
SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application.
- Score
- CVSS 3.0 7.2 High
- Status
- Modified - cna@sap.com
- Published
- 2017-12-12
- Last modified
- 2024-09-16
- Weaknesses
- CWE-94
Affected products
- Business Application Software Integrated Solution (Sap)
- Netweaver Internet Transaction Server (Sap)
- Sap Netweaver Internet Transaction Server Its (Sap)
References
- http://www.securityfocus.com/bid/102143
- https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/
- https://launchpad.support.sap.com/#/notes/2526781
