Vulnerability Details CVE-2013-6284
Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://scn.sap.com/docs/DOC-8218
- http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf
- https://service.sap.com/sap/support/notes/
- http://scn.sap.com/docs/DOC-8218
- http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf
- https://service.sap.com/sap/support/notes/
Products affected by CVE-2013-6284
-
cpe:2.3:a:sap:erp_central_component:-