CVE:CVE-2023-29109
CNNVD:CNNVD-202304-717
SAP Application Interface Framework（SAP AIF）是德国思爱普（SAP）公司的一个应用程序接口框架。
SAP Application Interface Framework (Message Dashboard) AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E版本存在安全漏洞，该漏洞源于程序允许 Excel 公式注入，攻击者利用该漏洞可以将任意 Excel 公式注入自定义提示列表的工具提示等字段中。
solution:Upgrade sap abap_platform to a higher version than 75c,75d,75e,and avoid the version 75c,75d,75e; Upgrade sap application_interface_framework to a higher version than aif_703,aifx_702,and avoid the version aif_703,aifx_702; Upgrade sap basis to a higher version than 755,756,and avoid the version 755,756; Upgrade sap s4core to a higher version than 101,and avoid the version 101