SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8663
Reference (s):
- http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition/
- http://service.sap.com/sap/support/notes/0001965819