The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2013-10-24T00:00:00Z
Updated: 2024-09-17T00:46:59.269Z
Reserved: 2013-10-23T00:00:00Z
Link: CVE-2013-6244
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-10-24T00:55:02.570
Modified: 2013-10-31T03:36:03.267
Link: CVE-2013-6244
Redhat
No data.