SAP Solution Manager Missing Input Sanitation Vulnerability Allowing Code Injection

A vulnerability exists in SAP Solution Manager due to inadequate input sanitation, enabling authenticated attackers to inject malicious code via remote-enabled function module calls. This flaw could grant attackers complete control over the system, significantly compromising the system's confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution, allowing attackers to gain full control over the affected system.

Remediation

Users are advised to consult the SAP Security Notes for guidance on applying necessary patches. SAP Security Notes can be accessed through the SAP for Me platform, specifically on the SAP Security Patch Day.