Home / Vulnerability Database / ABAP : Direct database update
ABAP

ABAP : Direct database update

Classification

Overview

SAP does not recommend direct updating of a database. According to the convention, table with name starting with y or z are developed by regular users or ABAP partners. The rest is considered to be standard, created by ABAP-developers.

Authorization checks are not supported by the UPDATE statement. You must include them in the program yourself. The UPDATE will not support the authorization check.

Changes to lines made with the UPDATE command become final after a database is committed. Prior to this, any database update can be canceled by a database rollback.

Before the UPDATE, you have to use the SAP Locking mechanism.

MEDIUM

DerScanner Severity Score

Do you want to fix ABAP : Direct database update in your application?

See also

ABAP

ABAP : Insufficient authorization check

ABAP

ABAP : Empty password

ABAP

ABAP : Weak seed of random number generator