Skip links
🔥🔥🔥 Join us for our upcoming training session at Black Hat MEA: "Securing SAP Systems: Expert Insights and Penetration Testing Techniques" 🛡️🔍

Untrusted XML Input parsing possible in iXML applications, SAP security note 1744122


A malicious user can modify an XML-based request to include XML content which is then parsed locally. This could allow a malicious user to perform a denial of service on the parsing system, or disclose local data which is then returned in the response to the malicious request.

Available fix and Supported packages

  • SAP_BASIS | 640 | 640
  • SAP_BASIS | 700 | 702
  • SAP_BASIS | 710 | 730
  • SAP_BASIS | 731 | 731

Affected component

    ABAP XML processing


Score: 0


Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.




How to detect over 4100 vulnerabilities in SAP Systems?

More to explorer