Xxe

2013-11-2014:12:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.7%

JSON

The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue.

CPENameOperatorVersion
netweaverle7.31
netweavereq7.30
netweavereq7.02
netweavereq7.03
netweavereq6.4
netweavereq7.0 sp15
netweavereq7.0 ehp2
netweavereq4.0
netweavereq7.01
netweavereq7.0 ehp1

Name	Operator	Version
netweaver	le	7.31
netweaver	eq	7.30
netweaver	eq	7.02
netweaver	eq	7.03
netweaver	eq	6.4
netweaver	eq	7.0 sp15
netweaver	eq	7.0 ehp2
netweaver	eq	4.0
netweaver	eq	7.01
netweaver	eq	7.0 ehp1

Rows per page:

1-10 of 131

References

scn.sap.com/docs/DOC-8218

secunia.com/advisories/55620

erpscan.io/advisories/erpscan-13-020-sap-netweaver-shsti_upload_xml-xxe/

service.sap.com/sap/support/notes/1890819