CyberRota Analysis
AI-GeneratedThe SAP Integration Suite is vulnerable due to inadequate validation of XML documents from untrusted sources, allowing low-privileged attackers to submit malicious XML payloads. Successful exploitation can lead to unauthorized access to sensitive file contents, severely compromising confidentiality, while also potentially causing resource exhaustion that affects availability. Organizations using SAP Integration Suite should prioritize addressing this vulnerability to protect sensitive data and maintain system integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declarations. Successful exploitation could allow the attacker to read sensitive file contents from the server and expose them through monitoring or logging output, resulting in a high impact on confidentiality. It could also lead to resource exhaustion, causing a low impact on availability. There is no impact on integrity.