First published: Tue Nov 04 2014(Updated: )
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SAP Netweaver Java Application Server |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-8590 has a high severity rating due to its potential to allow remote file access.
To fix CVE-2014-8590, apply the latest security patches provided by SAP for NetWeaver Application Server.
CVE-2014-8590 affects the SAP NetWeaver Application Server Java version.
CVE-2014-8590 is classified as an XML external entity (XXE) vulnerability.
Yes, CVE-2014-8590 can lead to unauthorized access of sensitive files, potentially resulting in data breaches.