cve/2016/CVE-2016-9563.md
2024-06-18 02:51:15 +02:00

817 B

CVE-2016-9563

Description

BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.comtcbpemhimuwlconnproviderweb/bpemuwlconn URI, aka SAP Security Note 2296909.

POC

Reference

Github