CVE-2020-26808

Name of the Vulnerable Software and Affected Versions SAP AS ABAP(DMIS) versions 2011 1 620 through 2020 SAP S4 HANA(DMIS) versions 101 through 105

Description The issue allows an authenticated attacker to inject arbitrary code into a function module, leading to code injection that can be executed in the application. This affects the confidentiality, availability, and integrity of the application.

Recommendations For SAP AS ABAP(DMIS) versions 2011 1 620 through 2020, update to a version that includes the fix for this issue. For SAP S4 HANA(DMIS) versions 101 through 105, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the function module to minimize the risk of exploitation.