CVE-2021-27635

Summary: CVE-2021-27635 affects SAP NetWeaver AS JAVA (versions 7.20, 7.30, 7.31, 7.40, 7.50). The issue is due to missing XML validation in the application, allowing an attacker authenticated as an administrator to submit a crafted XML over the network and potentially read any filesystem file (c...