CVE-2020-6366

CVE-2020-6366 affects SAP NetWeaver (Compare Systems) versions 7.20, 7.30, 7.40, and 7.50 where uploaded XML documents are not sufficiently validated. The underlying issue enables an administrative attacker to retrieve arbitrary server files (including OS-level files) and can cause a denial-of-se...