CVE-2014-8663

CVE-2014-8663 - A SQL injection vulnerability affecting SAP NetWeaver Business Warehouse, specifically the Data Basis (BW-WHM-DBA) component. The root cause is an SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability denotes t...

CVE-2014-5174

The CVE-2014-5174 entry affects the SAP NetWeaver Business Warehouse component, in which access to functions in the BW-SYS-DB-DB4 function group is not properly restricted. This allows remote authenticated users to obtain sensitive information via unspecified vectors. The available sources corrob...