CVE-2016-3974 XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access....
CriticalCVSS 9.1
EPSS 14.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to _tcmonitoringwebservice~web/ServerNodesWSService, aka SAP Security Note 2235994.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver application server java | >= 7.10, <= 7.50 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160618 [ERPSCAN-16-013] SAP NetWeaver AS Java ctcprotocol servlet - XXE vulnerability exploit mailing-list third-party-advisory
- erpscan.io third-party-advisory
- erpscan.io third-party-advisory
- 39995 exploit third-party-advisory vdb-entry