CVE-2013-6244

Description

The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

https://service.sap.com/sap/support/notes/1820894

http://www.securityfocus.com/bid/63302

http://secunia.com/advisories/55302

http://scn.sap.com/docs/DOC-8218

http://osvdb.org/98892

http://en.securitylab.ru/lab/PT-2013-13

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS