CVE-2020-26838

Description

SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it.

Risk Information

Base Score

9.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.003

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-26838,CVE-2021-21466 are affected in SAP Business Warehouse (Process Chains) 700	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466 are affected in SAP Business Warehouse (Process Chains) 701	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466 are affected in SAP Business Warehouse (Process Chains) 702	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 731	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 740	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 750	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 751	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 752	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 753	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 754	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 755	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21466,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 782	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 700	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 701	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 702	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 751	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 752	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 753	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 754	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 755	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466,CVE-2024-39594,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 700	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466,CVE-2024-39594,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 701	Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21466,CVE-2024-39594,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 702	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 751	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 752	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 753	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 754	Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 755	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234