- Vendor / Project
- SAP
- Product
- NetWeaver
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-611
Description
SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity (XXE) attacks.
Required action
Apply updates per vendor instructions.