CVE-2013-5723

SAP NetWeaver 7.30 - SQL Injection via ABAD0_DELETE_DERIVATION_TABLE

Title source: llm

Description

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0_DELETE_DERIVATION_TABLE."

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029018

Third Party Advisory x_refsource_misc

https://erpscan.io/advisories/dsecrg-13-016-sap-netweaver-abad0_delete_derivation_table/

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/54702

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/62147

Various Sources x_refsource_misc

https://service.sap.com/sap/support/notes/1840249

Various Sources x_refsource_confirm

http://scn.sap.com/docs/DOC-8218

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/96900

Scores

EPSS 0.0079

EPSS Percentile 74.1%

Details

CWE

CWE-89

Status published

Products (1)

sap/netweaver 7.30

Published Sep 12, 2013

Tracked Since Feb 18, 2026