Lucene search

K
nvd[email protected]NVD:CVE-2013-7095
HistoryDec 13, 2013 - 8:08 p.m.

CVE-2013-7095

2013-12-1320:08:40
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue.

Affected configurations

NVD
Node
sapcustomer_relationship_managementMatch7.02ehp2

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

Related for NVD:CVE-2013-7095