Description
Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP ABAP Server & ABAP Platform (Translation Tools) | < 701, < 740, < 750, < 751, < 752, < 753, < 754, < 755, < 756, < 804 | — |