SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.Referenceshttps://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397https://launchpad.support.sap.com/#/notes/2845183