---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Disable raw database query execution \[Updated in Security Center 1.3 and removed in 2.0\]

# Disable raw database query execution \[Updated in Security Center 1.3 and removed in
2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Control whether a user can perform raw SQL queries on the database.
The glide.db.allow_unsafe_dbi_execute_sql property enables users to perform
raw SQL queries on the database, which can give access to tables and data outside of GlideRecord restrictions. If this property is not set to the recommended value of false, this allows for the calling of
dbi.executeStatement() from a Glide Scriptable which can lead to malicious SQL statements being executed.  
Warnung:  
This property is both safe and no db override.

## More information {#sc-operation-level-access-control-requirements__section_qhx_1b1_xwb}

{#sc-operation-level-access-control-requirements__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.db.allow_unsafe_dbi_execute_sql |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 7.2 * CVSS score: High * Security risk details: Not setting this property to false enables calling of dbi.executeStatement() from a Glide Scriptable. {#sc-operation-level-access-control-requirements__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| References | [Access Control List Rules](https://servicenow-prod.fluidtopics.net/2FgxCh8jBiwu_X5BTzBrnw "Rules for access control lists (ACLs) restrict access to data by requiring users to pass a set of requirements before they can interact with it.") |
[ ]

{#sc-operation-level-access-control-requirements__table_ajc_b43_3kb}