Vulnerability Description
Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Erp Central Component | - |
References
- http://scn.sap.com/docs/DOC-8218
- http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_Septemb
- https://service.sap.com/sap/support/notes/
- http://scn.sap.com/docs/DOC-8218
- http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_Septemb
- https://service.sap.com/sap/support/notes/
FAQ
What is CVE-2013-6284?
CVE-2013-6284 is a vulnerability with a CVSS score of 7.5 (HIGH). Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via...
How severe is CVE-2013-6284?
CVE-2013-6284 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-6284?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Erp Central Component.