Vulnerability in SAP Netweaver Java Application Server

CVE-2014-8590

XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.

EPSS: 0.022 (80.3th percentile) — read the EPSS interpretation.

Affected products

References