medium5.0
CVE-2013-6815
The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of servi…
Impact
The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver | through 7.31 Versions 4.0, 6.4, 7.0, 7.01, 7.02 |
Weakness classification
References
- NVD record
- CVE.org record
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/55620
- https://erpscan.io/advisories/erpscan-13-020-sap-netweaver-shsti_upload_xml-xxe/
- https://service.sap.com/sap/support/notes/1890819
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/55620
- https://erpscan.io/advisories/erpscan-13-020-sap-netweaver-shsti_upload_xml-xxe/
- https://service.sap.com/sap/support/notes/1890819