CVE-2018-2477

Knowledge Management XMLForms in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2477

CVE-2018-2477 affects SAP NetWeaver Knowledge Management (XMLForms) across versions 7.30, 7.31, 7.40 and 7.50. The root cause is insufficient validation of XML documents from untrusted sources, described in CNVD as an XML External Entity Injection vulnerability, with potential information disclos...