CVE-2017-16349 - CVE House
Back to Database
Status published Medium CVE-2017-16349

An exploitable XML external entity vulnerability exists in the reporting...

Vulnerability Description

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-16349

Credits & Attribution

No credits recorded in the NVD database.

References

More from Insteon

View All →
CVE-2018-3834
An exploitable permanent denial of service vulnerability exists in Insteon...
High 8.7
CVE-2018-3833
An exploitable firmware downgrade vulnerability exists in Insteon Hub running...
High 8.6
CVE-2018-3832
An exploitable firmware update vulnerability exists in Insteon Hub running...
Critical 9.9
CVE-2017-5251
In version 1012 and prior of Insteon's Insteon Hub, the...
High 8.1
CVE-2017-5250
In version 1.9.7 and prior of Insteon's Insteon for Hub...
Critical 9.8

Affected Vendor

Affected Software

SAP
Vulnerable Versions:
SAP BPC

Timeline

Official Publish: August 2nd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.