Detections
Analytics
CVE-2016-6818
critical
Description
SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor response is SAP Security Note 2361633.
References
https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-january-2017/