Lucene search
+L

CVE-2023-36922 OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)

🗓️ 11 Jul 2023 02:56:55Reported by sapType 
cvelist
 cvelist
🔗 www.cve.org👁 59 Views

OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL). Allows authenticated attacker to inject arbitrary OS command, leading to data exposure and system shutdown

Related
Affected
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
SAP NetWeaver ABAP Arbitrary Command Execution
3 Aug 202300:00
–bdu_fstec
circl
Circl
CVE-2023-36922
12 Jul 202317:55
–circl
cnnvd
CNNVD
SAP NetWeaver ABAP Server 操作系统命令注入漏洞
11 Jul 202300:00
–cnnvd
cnvd
CNVD
SAP NetWeaver ABAP Server Operating System Command Injection Vulnerability
14 Jul 202300:00
–cnvd
cve
CVE
CVE-2023-36922
11 Jul 202302:56
–cve
euvd
EUVD
EUVD-2023-40842
3 Oct 202520:07
–euvd
ncsc
NCSC
Vulnerabilities fixed in SAP products
11 Jul 202300:00
–ncsc
nvd
NVD
CVE-2023-36922
11 Jul 202303:15
–nvd
osv_cve
osv_cve
CVE-2023-36922
11 Jul 202303:15
–osv_cve
prion
Prion
Design/Logic Flaw
11 Jul 202303:15
–prion
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "product": "SAP ECC and SAP S/4HANA (IS-OIL)",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "IS-OIL 600"
      },
      {
        "status": "affected",
        "version": "IS-OIL 602"
      },
      {
        "status": "affected",
        "version": "IS-OIL 603"
      },
      {
        "status": "affected",
        "version": "IS-OIL 604"
      },
      {
        "status": "affected",
        "version": "IS-OIL 605"
      },
      {
        "status": "affected",
        "version": "IS-OIL 606"
      },
      {
        "status": "affected",
        "version": "IS-OIL 617"
      },
      {
        "status": "affected",
        "version": "IS-OIL 618"
      },
      {
        "status": "affected",
        "version": "IS-OIL 800"
      },
      {
        "status": "affected",
        "version": "IS-OIL 802"
      },
      {
        "status": "affected",
        "version": "IS-OIL 803"
      },
      {
        "status": "affected",
        "version": "IS-OIL 804"
      },
      {
        "status": "affected",
        "version": "IS-OIL 805"
      },
      {
        "status": "affected",
        "version": "IS-OIL 806"
      },
      {
        "status": "affected",
        "version": "IS-OIL 807"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Dec 2023 16:39Current
9.2Critical risk
Vulners AI Score9.2
CVSS 3.19.1
EPSS0.00845
59