SAP Security Note #3687749, tagged with a CVSS score of 9.9, patches a critical SQL Injection vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials – General Ledger). The ORL team identified an RFC-enabled function module that uses the ABAP Database Connectivity (ADBC) framework in order to execute a native SQL statement. This SQL statement is provided through an input parameter and allows an attacker to execute arbitrary SQL commands. On successful exploitation, the system can be fully compromised. Dostlar S4 olanlar için dikkat,