VULNERABILITY INTELLIGENCE
CVE-2014-8590
CVSS score4.3 MEDIUM
EPSS probability2.15%
CISA KEVNot currently listed
Published2014-11-04
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.