CVE-2016-6818: SAP Business Intelligence Platform

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor response is SAP Security Note 2361633.

Affected products

• SAP Business Intelligence Platform: affected versions not specified

Published 2017-04-13. Last modified 2026-06-17.