Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application)
Vulnerability Description
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Vulnerability Title
SAP S/4HANA 代码问题漏洞
Vulnerability Description
SAP S/4HANA是德国思爱普（SAP）公司的一个基于 SAP HANA 内存数据库系统的的企业资源管理软件。 SAP S/4HANA存在代码问题漏洞，该漏洞源于Create Single Payment application允许攻击者将XML文件作为附件上传并在浏览器中打开，导致实体循环减慢浏览器速度。受影响的产品和版本：SAP S/4HANA Create Single Payment application 100版本，101版本，102版本，103版本，104版本，105版本，106版本，1
CVSS Information
N/A
Vulnerability Type
N/A