PT-2016-7834

Name of the Vulnerable Software and Affected Versions PricewaterhouseCoopers PwC ACE-ABAP version 8.10.304 for SAP Security Description The issue allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code. This can be achieved via SAPGUI or Internet Communicati...

CVE-2016-9832: Improper Neutralization of Special Elements in Output Used by a Downstream Component

PricewaterhouseCoopers PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via 1 SAPGUI or 2 Internet Communication Framework ICF over HTTP or HTTPS, as demonstrated by WEBGUI or Report...