Files
CVEs-PoC/2016/CVE-2016-9563.md
2025-09-29 21:09:30 +02:00

873 B

CVE-2016-9563

Description

BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.comtcbpemhimuwlconnproviderweb/bpemuwlconn URI, aka SAP Security Note 2296909.

POC

Reference

Github