It is unfortunate but true, organisations are being exposed to greater risk of increasingly creative multi-level attack and such forms of attack are becoming more automated and available to a wider group of criminals. This article in the blog “Protect2S-SAP Security automation” succinctly describes the high risk that SAP Oil & Gas systems are exposed to if using “CALL SYSTEM” for their quantity conversions calculations. See this FAQ for more detail.