what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

SAP XMII Remote Code Execution

Posted Jun 15, 2021

Authored by Nicolas Raus | Site onapsis.com

By abusing a code injection vulnerability in SAP MII, an authenticated user with SAP XMII developer privileges could execute code (including OS commands) on the server. Versions affected include XMII 15.1 lower than SP006 PL 000062, XMII 15.2 lower than SP003 PL 000038, XMII 15.3 lower than SP001 PL 000022, and XMII 15.4 lower than SP001 PL 000007.

tags | advisory

advisories | CVE-2021-21480

SHA-256 | 69744f870d334f7a6c685c786466810e8972c0a978bc2ed72164e0f20f04a019

Download | Favorite | View

Related Files

No related files