Security SAP NetWeaver AS JAVA 7.5 XXE Injection June 17, 2016 007admin Leave a comment SAP NetWeaver AS JAVA versions 7.1 through 7.5 suffer from an XML external entity injection vulnerability.