CVE-2019-0393: SQL Injection
First published: Wed Nov 13 2019(Updated: )
An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Quality Management | =1.0 | |
| SAP Quality Management | =1.01 | |
| SAP Quality Management | =1.02 | |
| SAP Quality Management | =1.03 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/event
- agent/type
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap quality management
- version/sap quality management/1.0
- version/sap quality management/1.01
- version/sap quality management/1.02
- version/sap quality management/1.03