CVE-2018-2477: XML Injection (aka Blind XPath Injection)

Knowledge Management XMLForms in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source...

PT-2018-15593

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management XMLForms versions 7.30 through 7.50 Description The issue arises from insufficient validation of an XML document accepted from an untrusted source. This could potentially lead to security issues, but specific...