CVE-2013-6244 | BDVDB-2026-58178 Detail

Description#

The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/55302
http://en.securitylab.ru/lab/PT-2013-13
https://service.sap.com/sap/support/notes/1820894
http://osvdb.org/98892
http://scn.sap.com/docs/DOC-8218
http://www.securityfocus.com/bid/63302

Exploit#

No public exploit known

History#

Version 12013-10-24Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.