Topic starter
Description
An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.
Â
ReferencesÂ
https://me.sap.com/notes/3697099
Posted : 18/02/2026 9:45 pm
