Denial of service

2020-10-2014:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

SAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate uploaded XML documents. An attacker with administrative privileges can retrieve arbitrary files including files on OS level from the server and/or can execute a denial-of-service.

CPENameOperatorVersion
netweaver_compare_systemseq7.30
netweaver_compare_systemseq7.40
netweaver_compare_systemseq7.31
netweaver_compare_systemseq7.50
netweaver_compare_systemseq7.20

Name	Operator	Version
netweaver_compare_systems	eq	7.30
netweaver_compare_systems	eq	7.40
netweaver_compare_systems	eq	7.31
netweaver_compare_systems	eq	7.50
netweaver_compare_systems	eq	7.20