CVE-2025-30013
Code Injection vulnerability in SAP ERP BW Business Content
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Code Injection vulnerability in SAP ERP BW Business Content
SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintended commands on the underlying system, posing a significant security risk to the confidentiality, integrity and availability of the application.
Reserved 2025-03-13 | Published 2025-04-08 | Updated 2025-04-10 | Assigner sapCWE-94: Improper Control of Generation of Code
Support options
