EDB-50900

PoC

SAP BusinessObjects Intelligence 4.3 - XML External Entity (XXE)

view exploit source exploit_dbtype remoteauthor West Shepherdpublished 2022-05-11catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-28213US	high8.1	12.5% (96th)	Exploit	2022-04-12
When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an u…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.