Design/Logic Flaw

2020-02-1220:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service.

CPENameOperatorVersion
netweaver_guided_procedureseq7.11
netweaver_guided_procedureseq7.20
netweaver_guided_procedureseq7.30
netweaver_guided_procedureseq7.31
netweaver_guided_procedureseq7.40
netweaver_guided_procedureseq7.50
netweaver_guided_procedureseq7.10

Name	Operator	Version
netweaver_guided_procedures	eq	7.11
netweaver_guided_procedures	eq	7.20
netweaver_guided_procedures	eq	7.30
netweaver_guided_procedures	eq	7.31
netweaver_guided_procedures	eq	7.40
netweaver_guided_procedures	eq	7.50
netweaver_guided_procedures	eq	7.10