CVE-2018-2477

Knowledge Management XMLForms in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source...

Design/Logic Flaw

Knowledge Management XMLForms in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2477

Knowledge Management XMLForms in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2477

Knowledge Management XMLForms in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2477

CVE-2018-2477 affects SAP NetWeaver Knowledge Management (XMLForms) across versions 7.30, 7.31, 7.40 and 7.50. The root cause is insufficient validation of XML documents from untrusted sources, described in CNVD as an XML External Entity Injection vulnerability, with potential information disclos...

CVE-2018-2477: XML Injection (aka Blind XPath Injection)

Knowledge Management XMLForms in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source...

PT-2018-15593

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management XMLForms versions 7.30 through 7.50 Description The issue arises from insufficient validation of an XML document accepted from an untrusted source. This could potentially lead to security issues, but specific...