What’s Vulnerable › Vulnerabilities

CVE-2023-32115: SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-13 · updated 2026-06-17
• Weakness: CWE-89

Description

An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.

Affected products

• SAP_SE Master Data Synchronization (MDS COMPARE TOOL): 600, 602, 603, 604, 605, 606 (+1)

References

• https://launchpad.support.sap.com/#/notes/1794761
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
• https://launchpad.support.sap.com/#/notes/1794761
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Get alerted when CVE-2023-32115 or the next vulnerability affects your stack