SAP SE SAP ECC And SAP S/4Hana (IS OIL) vulnerabilities

1 vulnerability

Known vulnerabilities in SAP SE SAP ECC And SAP S/4Hana (IS OIL), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CriticalCVE-2023-36922sap_se · sap ecc and sap s/4hana (is-oil) +1 more3y agoOS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. On successful exploitation, the attacker can read or modify the system data as well as shut down the system.EPSS0.84%