Vulnerability Description
SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Bi Universal Data Integration | - |
Related Weaknesses (CWE)
References
- http://www.onapsis.com/get.php?resid=adv_onapsis-2013-013
- http://www.onapsis.com/research-advisories.php
- http://www.onapsis.com/get.php?resid=adv_onapsis-2013-013
- http://www.onapsis.com/research-advisories.php
FAQ
What is CVE-2013-7355?
CVE-2013-7355 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema.
How severe is CVE-2013-7355?
CVE-2013-7355 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-7355?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Bi Universal Data Integration.