description: SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
problem types: Code Injection
affected:
{
product: SAP Cloud Connector
vendor: SAP SE
versions:
status: affected, version: < 2.11.3
}