Remote Code Execution Vulnerability in SAP Disclosure Management 10.1

CVE-2020-26828

Summary

SAP Disclosure Management, version 10.1, is susceptible to a remote code execution vulnerability that allows authorized users to upload specific file types. These files can contain formulas that invoke external applications or execute scripts on the target machine. This could potentially be exploited to manipulate or exfiltrate sensitive data present in spreadsheets, posing significant risks to data integrity and confidentiality.

References