| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver | = 4.0= 6.4= 7.0= 7.01= 7.02= 7.03= 7.10= 7.30≤ 7.31 |
The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free