CVE-2013-3678

Published: Nov 19, 2014Modified: May 6, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted (1) RFC or (2) SOAP-RFC request.

Affected (1)

Products: Sap: Governance Risk And Compliance

Sap

1 product

Governance Risk And Compliance

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sap Governance Risk And Compliance	All versions

References (14)

http://packetstormsecurity.com/files/129083/SAP-GRC-Bypass-Privilege-Escalation-Program-Execution.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Nov/25

Source: cve@mitre.org

http://www.esnc.de/security-advisories/security-vulnerability-in-sap-grc-access-control

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/533965/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/71055

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/98637

Source: cve@mitre.org

https://service.sap.com/sap/support/notes/2039348

Source: cve@mitre.org

http://packetstormsecurity.com/files/129083/SAP-GRC-Bypass-Privilege-Escalation-Program-Execution.html