VULNERABILITY INTELLIGENCE
CVE-2008-4387
CVSS score9.3 HIGH
EPSS probability15.50%
CISA KEVNot currently listed
Published2008-11-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')