PT-2020-7900

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server before Security Note 2183189 Description: The issue allows XXE attacks for local file inclusion via the "sap/bc/ui2/nwbc/nwbc ext2int/" URI. This can be exploited to access local files. Recommendations: For SA...