CVE-2016-9563mediumunder attackCWE-611

CVE-2016-9563

Published · Updated

Follow this CVE+ Monitor SAP NetWeaver

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Attendcvss 6.5epss 24%
from disclosure to weapon
Published on NVDNov 23
CISA KEV+1806d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A vulnerability in SAP NetWeaver allows authenticated users to exploit XML External Entity (XXE) attacks through a specific web interface. This could let attackers read sensitive files or cause system disruption by manipulating how the application processes XML data.

Technical detail

The BC-BMT-BPM-DSK component in SAP NetWeaver AS JAVA 7.5 fails to properly validate XML input at the bpemuwlconn URI endpoint, enabling XXE injection attacks. An authenticated attacker can exploit this to access arbitrary files on the server or perform server-side request forgery (SSRF) operations.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a