This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2017-16349 | BDVDB-2026-105463 Detail

InsteonSAP

Description#

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability.

Impact#

Per CVSS v3.0: confidentiality impact low, integrity impact none, availability impact low. Attack vector: network.

Weaknesses#

No weakness recorded in the source data.

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.