CVE-2015-1309

The CVE-2015-1309 entry describes an XML External Entity (XXE) vulnerability in SAP NetWeaver AS ABAP, affecting the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier. The root cause is and was exposure to crafted XML requests that leverage ECATT_DISPLAY_XMLSTRIN...

CVE-2014-8312

CVE-2014-8312 affects SAP NetWeaver AS ABAP 7.31 (Business Warehouse BW). The vulnerability is caused by the RSDU_CCMS_GET_PROFILE_PARAM RFC function, where remote authenticated users can obtain sensitive information due to insufficient access control. Affected component is SAP NetWeaver ABAP, ve...

CVE-2013-6815

The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...