SAP BPC Web Application Information Disclosure Vulnerability

🗓️ 19 Apr 2018 00:00:00Reported by Talos IntelligenceType

talos🔗 www.talosintelligence.com👁 261 Views

SAP BPC Web Application XML External Entity Injection Vulnerability Causes Information Disclosure and Potential Denial of Service. Vulnerability discovered in SAP BPC Web Application's reporting functionality can be exploited by an attacker to cause XML external entity to be referenced, leading to information disclosure and potential denial of service. The vulnerability could also enable an attacker to trigger a CPU or memory exhaustion attack through recursively defined XML entities

Reporter	Title	Published	Views	Family All 9
CNVD	SAP Business Planning and Consolidation XNL External Entity Injection Vulnerability	7 Aug 201800:00	–	cnvd
CVE	CVE-2017-16349	2 Aug 201819:00	–	cve
Cvelist	CVE-2017-16349	2 Aug 201819:00	–	cvelist
EUVD	EUVD-2017-7544	7 Oct 202500:30	–	euvd
NVD	CVE-2017-16349	2 Aug 201819:29	–	nvd
Prion	Xxe	2 Aug 201819:29	–	prion
Positive Technologies	PT-2018-6278 · Sap · Sap Bpc	2 Aug 201800:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2017-16349: Improper Restriction of XML External Entity Reference	2 Aug 201800:00	–	rapid7
Talos	SAP BPC Web Application Information Disclosure Vulnerability	19 Apr 201800:00	–	talos