CVE-2021-21465

The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can include their own SQL commands which the database will execute without properly sanitizing the untrusted data leading to SQL injection...

CVE-2021-21465

The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can include their own SQL commands which the database will execute without properly sanitizing the untrusted data leading to SQL injection...

CVE-2021-21465

CVE-2021-21465 affects SAP BW Database Interface. The vulnerability arises from improper sanitization of untrusted data, allowing an attacker with low privileges to craft SQL queries that the backend database will execute, potentially fully compromising the SAP system. Connected sources corrobora...