CVE-2018-2401

SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External…

Medium · published March 14, 2018

CVSS v3.0
5.4
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01587 · 75.4th percentile
Published
2018-03-14T19:00Z
EPSS history
Timeline
  • 14 MAR 19:00Z
    SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External…
    cvelistv5