CVE-2016-9832

PricewaterhouseCoopers PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via 1 SAPGUI or 2 Internet Communication Framework ICF over HTTP or HTTPS, as demonstrated by WEBGUI or Report...

Design/Logic Flaw

PricewaterhouseCoopers PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via 1 SAPGUI or 2 Internet Communication Framework ICF over HTTP or HTTPS, as demonstrated by WEBGUI or Report...

CVE-2016-9832

CVE-2016-9832 involves PwC ACE-ABAP 8.10.304 for SAP Security. A remote authenticated attacker can perform ABAP injection via SAPGUI or Internet Communication Framework (ICF) over HTTP/HTTPS (WEBGUI or Report) to execute arbitrary code. CNVD/related records describe remote code execution and pote...

CVE-2016-9832: Improper Neutralization of Special Elements in Output Used by a Downstream Component

PricewaterhouseCoopers PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via 1 SAPGUI or 2 Internet Communication Framework ICF over HTTP or HTTPS, as demonstrated by WEBGUI or Report...

PT-2016-7834

Name of the Vulnerable Software and Affected Versions PricewaterhouseCoopers PwC ACE-ABAP version 8.10.304 for SAP Security Description The issue allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code. This can be achieved via SAPGUI or Internet Communicati...