View Attack Vector

General Information

ABAP Code Injection

Variants:
Direct Persistent Session

Also Known As:
ABAP Dynamic Code Evaluation

Vector Type:
Attack

Relevance:
Technology Specific

Layer:
Application-Level

Platforms:
ABAP, SAP

Target Type:
Web Application, SAP GUI Application

Affected Mechanisms:
Input Validation. Syntax Escaping

Invented In:
15/09/2012

Added In:
08/12/2014

Quick Introduction to the Topic:

Vector Operation Method:
Malicious inputs can affect the structure of ABAP code

Direct Variant:

ABAP Injection

Variant Title:
ABAP Injection

Typical Severity:
Critical

Resources:

Other I

White Papers:

Learn More:

Persistent Variant:

Stored ABAP Injection

Also Known As:
Persistent ABAP Injection

Typical Severity:
Critical

Resources:

White Papers:

Learn More:

Session Variant:

ABAP Injection via Session Puzzling

Also Known As:
Session ABAP Injection

Typical Severity:
Critical

Resources:

White Papers:

Learn More: