SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection.
References
Link | Resource |
---|---|
https://launchpad.support.sap.com/#/notes/2916927 | Permissions Required |
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2020-05-12 18:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-6241
Mitre link : CVE-2020-6241
CVE.ORG link : CVE-2020-6241
JSON object : View
Products Affected
sap
- adaptive_server_enterprise
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')