CVE-2021-37531: Improper Neutralization of Special Elements used in an OS Command

SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be...

PT-2021-21694

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management XML Forms versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50 Description The issue allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level...