Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:N/C:P/I:P/A:PSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1772370-4)
SAP Support Packages
(CM+COLLABORATION_60_640_SP027_000012, CM+COLLABORATION_60_640_SP028_000010, CM+COLLABORATION_60_640_SP029_000008, CM+COLLABORATION_60_640_SP030_000002, CM+COLLABORATION_60_640_SP031_000001, CM+COLLABORATION_60_640_SP999999_999999, KMC_BASE_COMPONENTS_730_SP005_000012, KMC_BASE_COMPONENTS_730_SP007_000007, KMC_BASE_COMPONENTS_730_SP008_000001, KMC_BASE_COMPONENTS_730_SP009_000000, KMC_BASE_COMPONENTS_730_SP999999_999999, KMC_BASE_COMPONENTS_731_SP001_000007, KMC_BASE_COMPONENTS_731_SP002_000008, KMC_BASE_COMPONENTS_731_SP003_000004, KMC_BASE_COMPONENTS_731_SP004_000004, KMC_BASE_COMPONENTS_731_SP005_000002, KMC_BASE_COMPONENTS_731_SP006_000000, KMC_BASE_COMPONENTS_731_SP999999_999999, PORTAL_FRAMEWORK_700_SP025_000014, PORTAL_FRAMEWORK_700_SP026_000008, PORTAL_FRAMEWORK_700_SP027_000003, PORTAL_FRAMEWORK_700_SP028_000001, PORTAL_FRAMEWORK_700_SP029_000000, PORTAL_FRAMEWORK_700_SP999999_999999, PORTAL_FRAMEWORK_701_SP010_000015, PORTAL_FRAMEWORK_701_SP011_000009, PORTAL_FRAMEWORK_701_SP012_000002, PORTAL_FRAMEWORK_701_SP013_000000, PORTAL_FRAMEWORK_701_SP999999_999999, PORTAL_FRAMEWORK_702_SP008_000015, PORTAL_FRAMEWORK_702_SP009_000013, PORTAL_FRAMEWORK_702_SP010_000012, PORTAL_FRAMEWORK_702_SP011_000008, PORTAL_FRAMEWORK_702_SP012_000003, PORTAL_FRAMEWORK_702_SP013_000000, PORTAL_FRAMEWORK_702_SP999999_999999)
Описание
The problem is caused by a program error in KM UI due to the incorrect use of an XML parser.By default, the parser opens external entities referenced within an XML input, which can then lead to malicious content being parsed. This malicious content can reference internal or external resources, such as files.
Как исправить
For more information about the affected releases, see the "SP Patch Level" tab page of this SAP note.
Ссылки
