CVE-2020-6262

The CVE-2020-6262 entry concerns SAP Application Server ABAP (ST-PI) with vulnerable releases before 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740. The underlying issue is a code injection flaw in Service Data Download that could allow an attacker to inject and execute code with...

CVE-2019-0293

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system ST-PI, before versions 20081700, 20081710, and 740...

CVE-2019-0293

CVE-2019-0293 concerns the SAP ST-PI component where a read of an RFC destination may skip necessary authorization checks, enabling a local escalation of privileges to view information on RFC destinations on managed systems and SAP Solution Manager. Affected are ST-PI versions prior to 2008_1_700...