SAP Starter Solution Database Query Execution Vulnerability

A vulnerability in SAP Starter Solution allows authenticated attackers to execute crafted database queries, potentially exposing the back-end database. This issue arises from insufficient query handling, enabling manipulation of database interactions. While the vulnerability poses a low risk to the application's confidentiality and integrity, it does not affect availability.

Impact

Exploitation of this vulnerability could lead to unauthorized exposure of the back-end database, allowing attackers to access or manipulate database information.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform, specifically on the SAP Security Patch Day.