Description (CNA)
In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not sufficiently validate an XML document accepted from an untrusted source.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / SAP NetWeaver BI | affected = 7.30; affected = 7.31; affected = 7.40; affected = 7.41; affected = 7.50 |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/2644279
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
- http://www.securityfocus.com/bid/105326
ADP enrichment
No English description supplied.