CVE-2015-3980

High

Published: 12/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to and modification of data, posing a serious threat to organizational security.

Recommendation

It is recommended to update the system to the latest version and implement appropriate security measures to minimize the risk of attack.

Other vulnerabilities in Business Rules Framework (CRM-BF-BRF) in SAP CRM

CVE-2015-3979High
Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary code via unknown vectors.

Original NVD description (English source)

SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534.