Critical severity9.8NVD Advisory· Published Apr 13, 2017· Updated Jun 17, 2026
CVE-2016-6818
CVE-2016-6818
Description
SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor response is SAP Security Note 2361633.
Affected products
2- cpe:2.3:a:sap:business_intelligence_platform:-:*:*:*:*:*:*:*
- Range: <January 2017
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/97661nvdThird Party AdvisoryVDB Entry
- erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-january-2017/nvd
News mentions
0No linked articles in our index yet.