Tag: XXE

CVE-2020-6366 Missing XML Validation in SAP NetWeaver (Compare Systems), SAP security note 2969457

RedRays Team October 13, 2020

CVE-2020-6285 Information Disclosure in SAP NetWeaver (XMLToolkit for Java), SAP security note 2932473

RedRays Team July 14, 2020

CVE-2020-6202 Missing XML Validation in SAP NetWeaver Application Server Java (User Management Engine), SAP security note 2847787

RedRays Team March 10, 2020

Update 1 to Security Note 2736825 – CVE-2019-0271 Denial of Service via XML External Entity (XXE) vulnerability in ABAP Server, SAP security note 2870067

RedRays Team February 11, 2020

CVE-2020-6187Missing XML Validation vulnerability in SAP NetWeaver(Guided Procedures), SAP security note 2864415

RedRays Team February 11, 2020

CVE-2019-0396 Missing XML Validation vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), SAP security note 2814007

RedRays Team November 12, 2019

CVE-2019-0265 XML External Entity (XXE) vulnerability in SLD Registration of SAP NetWeaver and ABAP Platform, SAP security note 2729710

RedRays Team April 9, 2019

CVE-2019-0284 XML External Entity vulnerability in SAP HANA sldreg, SAP security note 2772376

RedRays Team April 9, 2019

CVE-2019-0277 XML External Entity vulnerability in SAP HANA extended application services, advanced, SAP security note 2764283

RedRays Team March 12, 2019

CVE-2018-2492 Missing XML Validation in SAP NetWeaver AS Java, SAP security note 2642680

RedRays Team December 11, 2018

CVE-2018-2477 XML External Entity (XXE) vulnerability in SAP NetWeaver Knowledge Management XMLForms, SAP security note 2661740

RedRays Team November 13, 2018

Denial of service (DOS) in OPC UA applications of SAP Plant Connectivity, SAP security note 2674215

RedRays Team October 9, 2018