CVE-2015-3980: SQL Injection

Published May 12, 2015

Updated

SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534.

Affected Software

1 affected component

SAP Customer Relationship Management

Event History

May 12, 2015

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-3980?

CVE-2015-3980 is classified with a high severity rating due to its potential for SQL injection and arbitrary SQL command execution.

How do I fix CVE-2015-3980?

To mitigate CVE-2015-3980, apply the relevant patches provided in SAP Security Note 2097534 for the affected versions of SAP CRM.

What systems are affected by CVE-2015-3980?

CVE-2015-3980 affects SAP Customer Relationship Management installations that utilize the Business Rules Framework.

What type of vulnerability is CVE-2015-3980?

CVE-2015-3980 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.

Who discovered CVE-2015-3980?

CVE-2015-3980 was identified through analysis of SAP software, leading to SAP Security Note 2097534 being issued.