CVE-2014-1962

This CVE concerns SAP CRM’s Gwsync component in SAP CRM 7.02 EHP2, where an XML External Entity (XXE) issue could allow remote attackers to obtain sensitive information. The underlying cause is XXE processing flaws in the affected workflow, enabling information disclosure without involving integr...