4 matches found
EUVD-2021-8744
Malicious code in bioql PyPI...
CVE-2021-21470
SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configurati...
PT-2021-14538
Name of the Vulnerable Software and Affected Versions SAP EPM Add-in for Microsoft Office version 1010 SAP EPM Add-in for SAP Analysis Office version 2.8 Description The issue allows an authenticated attacker with user privileges to parse malicious XML files, potentially resulting in XXE-based...
CVE-2021-21470: Improper Restriction of XML External Entity Reference
SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configurati...