CVE-2016-9832

Critical

Published: 10/12/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via SAPGUI or Internet Communication Framework (ICF) over HTTP or HTTPS.

Risk Assessment

The organization is at risk of unauthorized code execution, which could lead to data loss or system takeover.

Recommendation

It is recommended to update to the latest version of PwC ACE-ABAP and implement appropriate security measures to restrict system access to trusted users.

Original NVD description (English source)

PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report.