SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.2epss 0.2%
exploitation probability
0.2%top 88% of all CVEs
observed exploitation
nono source reports it
An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Affected products
SAP_SE · Master Data Synchronization (MDS COMPARE TOOL)