⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2016-9563

CRITICAL · 9.5 CVSS Gepubliceerd: 03-11-2021 CWE-611

Beschrijving

SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity (XXE) attacks.

Required action: Apply updates per vendor instructions.

Vendors

Sap

Affected products

Netweaver

References

nvd.nist.gov