medium5.4
CVE-2018-2401
SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External …
Impact
SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redwood | Sap Business Process Automation | Version 9.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103374
- https://blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/
- https://launchpad.support.sap.com/#/notes/2596766
- http://www.securityfocus.com/bid/103374
- https://blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/
- https://launchpad.support.sap.com/#/notes/2596766