Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-25615 EUVD-2023-29555GHSA-x94j-mc2f-6995

SQL Injection vulnerability in SAP ABAP Platform

Published Mar 14, 2023 · Updated Feb 27, 2025 · Assigned by sap

Description

Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data. This may lead to a high impact on the confidentiality and no impact on the availability and integrity of the application.

Affected products

VendorProductAffectedFixed
SAP ABAP Platform 751, 753, 754, 756, 757, 791 —

Advisories 1

References