EUVD-2014-2015

Malware in sbrugna...

CVE-2014-1962

Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity XXE issue...

Xxe

Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity XXE issue...

CVE-2014-1962

Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity XXE issue...

CVE-2014-1962

This CVE concerns SAP CRM’s Gwsync component in SAP CRM 7.02 EHP2, where an XML External Entity (XXE) issue could allow remote attackers to obtain sensitive information. The underlying cause is XXE processing flaws in the affected workflow, enabling information disclosure without involving integr...

CVE-2014-1962: Exposure of Sensitive Information to an Unauthorized Actor

Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity XXE issue...

SAP CRM gwsync - XXE

Application: SAP CRM Versions Affected: SAP CRM 7.02 EHP 2 Vendor URL: http://www.sap.com Bugs: XXE Reported: 09.07.2013 Vendor response: 10.07.2013 Date of Public Advisory: 25.01.2014 Reference: SAP Security Note 1917054 CVSS: AV:N/AC:L/AU:N/C:P/I:N/A:N 5.0 Authors: Alexey Tyurin, Nikolay...