Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8rf9-8x75-vvg3

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability.

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability.

EPSS

Процентиль: 56%
0.00333
Низкий

8.1 High

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 8.1
nvd
больше 7 лет назад

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability.

EPSS

Процентиль: 56%
0.00333
Низкий

8.1 High

CVSS3

Дефекты

CWE-611