NVD

Id
41371  
Name
CVE-2013-6284  
Description
Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-26  
Modified Date
2013-10-28  
Seq
2013-6284  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209055 41371 CVE-2013-6284 http://scn.sap.com/docs/DOC-8218  View
209056 41371 CVE-2013-6284 http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf  View
209057 41371 CVE-2013-6284 https://service.sap.com/sap/support/notes/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23340 JVNDB-2013-004915 SAP ERP Central Component 用 Financial Services モジュールにおける任意のコードを実行される脆弱性 SAP ERP Central Component (ECC) 用 Financial Services モジュールの Insurance (FS_SR) コンポーネント用の Statutory Reporting には、"コードインジェクションの脆弱性" に関する不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2013-6284 66226 CVE-2013-6284 41371 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004915.html 2013-10-26 2013-10-29 View