ID CVE-2013-6822
Summary GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity (XXE) issue.
References
Vulnerable Configurations
  • cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*
    cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 10-12-2018 - 19:29)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
confirm http://scn.sap.com/docs/DOC-8218
misc https://erpscan.io/advisories/dsecrg-13-002-sap-grmgapp-xxe-and-authentication-bypass/
Last major update 10-12-2018 - 19:29
Published 20-11-2013 - 14:12
Last modified 10-12-2018 - 19:29
Back to Top