SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
https://launchpad.support.sap.com/#/notes/2689259