The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the `TABLE` parameter to the "esbus/servlet/GetSQLData" endpoint or the `QUERY` parameter to the "KK LS9ReportingPortal/GetData" endpoint.