CVE-2023-36922

Summary

CVE-2023-36922 is a vulnerability affecting the IS-OIL component in SAP ECC and SAP S/4HANA systems. due to a programming error in a function module and report, an authenticated attacker can inject arbitrary operating system commands into an unprotected parameter in a common (default) extension. Upon successful exploitation, the attacker can gain the ability to read, modify system data, and even shut down the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.