Summary
SAP MaxDB is prone to an unspecified remote code-execution vulnerability because it fails to sufficiently validate user- supplied input.
An attacker can leverage this issue to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will result in a denial-of- service condition.
Solution
Updates are available
please contact the vendor for more information.
References
Severity
Classification
-
CVE CVE-2010-1185 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities