H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity (XXE) attacks.

Labels

exploitedkev

CISA KEV context

Vendor / productSAP NetWeaver
Added2021-11-03
Due date2022-05-03
2 recorded

Relationships

mitigatesMitigation
2 external

References

nvd
CVE-2016-9563
open
cwe
CWE-611
open