CVE-2013-3062

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-01 · updated 2026-06-16
Weakness: CWE-264

Description

The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.

Affected products

SAP Production Planning And Control: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2013-04/0178.html
http://scn.sap.com/docs/DOC-8218
http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/38-privilege-escalation-in-sap-production-planning-and-control
https://service.sap.com/sap/support/notes/1537089
http://archives.neohapsis.com/archives/bugtraq/2013-04/0178.html
http://scn.sap.com/docs/DOC-8218
http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/38-privilege-escalation-in-sap-production-planning-and-control
https://service.sap.com/sap/support/notes/1537089

Get alerted when CVE-2013-3062 or the next vulnerability affects your stack