Injection vulnerabilities relate to an attacker's ability to insert control characters or commands into an application via an input field. A successful attack can disrupt the planned program sequence with unexpected commands.

Injection vulnerabilities represent the greatest security risk for in-house or custom development. Incorrect code in an ABAP application can sometimes allow an attacker to completely control an SAP system. Since such attacks are very complex and come in many variants, they are very difficult to detect and resolve without special training.