CVE-2016-7435

The CVE-2016-7435 entry concerns SAP NetWeaver 7.40 SP 12 SCTC components (EXPORT_TAB_COMP, REFRESH_CHECK_ENV, TMS_MAINTAIN_ALOG). The root cause is command injection via OS command execution using a CALL 'SYSTEM' statement when the SCTC functions fail to clean up properly. Affected product: SAP ...

SAP Netweaver 7.40 SP 12 SCTC_REFRESH_CHECK_ENV Command Injection Vulnerability

Exploit for windows platform in category remote exploits Onapsis Security Advisory ONAPSIS-2016-042: SAP OS Command Injection in SCTCREFRESHCHECKENV 1. Impact on Business ===================== By exploiting this vulnerability an authenticated user will be able to take full control of the system...

SAP Netweaver 7.40 SP 12 SCTC_REFRESH_EXPORT_TAB_COMP Command Injection Vulnerability

Exploit for windows platform in category remote exploits Onapsis Security Advisory ONAPSIS-2016-041: SAP OS Command Injection in SCTCREFRESHEXPORTTABCOMP 1. Impact on Business ===================== By exploiting this vulnerability an authenticated user will be able to take full control of the...