CVE-2017-8913

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a…

published May 23, 2017

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01393 · 72.0th percentile
Published
2017-05-23T03:56Z
EPSS history
Timeline
  • 23 MAY 03:56Z
    The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a…
    cvelistv5