PT-2016-1706

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA AS 7.4 Description The issue is related to an XML external entity XXE vulnerability in the UDDI component, which is caused by incorrect restriction of XML links to external objects. This can be exploited by a remote attacker...

CVE-2016-4014: Undefined Security Weakness

XML external entity XXE vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service system hang via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389...