SAP ABAP Reports Input Validation Vulnerability Allowing Arbitrary Database Table Deletion

A vulnerability exists in SAP ABAP reports due to inadequate input validation. An attacker with high privilege access could delete the contents of arbitrary database tables, provided those tables are not safeguarded by an authorization group. This flaw significantly undermines the integrity and availability of the database, although it does not affect confidentiality.

Impact

Exploitation of this vulnerability could result in the unauthorized deletion of database table contents, causing a high impact on database integrity and availability.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP Security Patch Day, which occurs on the second Tuesday of each month. For more information, consult the SAP Security Notes FAQ.