CVE-2024-42374 XML injection in SAP BEx Web Java Runtime Export Web Service

BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source. An attacker can retrieve information from the SAP ADS system and exhaust the number of XMLForm service which makes the SAP ADS rendering PDF creation unavailable. This affects...

CVE-2024-42374 XML injection in SAP BEx Web Java Runtime Export Web Service

BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source. An attacker can retrieve information from the SAP ADS system and exhaust the number of XMLForm service which makes the SAP ADS rendering PDF creation unavailable. This affects...

SAP BEx Web Java Runtime Export Web Service 安全漏洞

SAP BEx Web Java Runtime Export Web Service is a service for creating Java-based Web applications from SAP, Germany. A security vulnerability exists in SAP BEx Web Java Runtime Export Web Service that stems from the presence of an XML injection vulnerability...

ITOP 跨站脚本漏洞

ITOP is a platform that provides all the resources needed to optimize iTop. A cross-site scripting vulnerability exists in ITOP version 3.0.1, which stems from a lack of checksum filtering of user-supplied and output data on the /itop/webservices/export-v2.php page. An attacker can exploit this...