What’s Vulnerable › Vulnerabilities

CVE-2013-3244

• Severity: medium (CVSS 6.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-10-24 · updated 2026-06-16
• Weakness: CWE-94

Description

Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2) SOAP-RFC request.

Affected products

• SAP Erp Central Component: all versions

References

• http://scn.sap.com/docs/DOC-8218
• http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/58-remote-code-injection-in-sap-erp-project-system.html
• https://service.sap.com/sap/support/notes/1776695
• http://scn.sap.com/docs/DOC-8218
• http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/58-remote-code-injection-in-sap-erp-project-system.html
• https://service.sap.com/sap/support/notes/1776695

Get alerted when CVE-2013-3244 or the next vulnerability affects your stack