Posted by ERPScan inc on Nov 24

Application: SAP NetWeaver
Versions Affected: SAP NetWeaver 7.4, probably others
Vendor URL: http://SAP.com
Bugs: XML External Entity
Send: 16.04.2015
Reported: 16.04.2015
Vendor response: 16.04.2015
Date of Public Advisory: 11.08.2015
Reference: SAP Security Note 2168485
Author: Roman Bezhan (ERPScan)

Description

1. ADVISORY INFORMATION

Title: SAP NetWeaver 7.4
Advisory ID: [ERPSCAN-15-018]…