Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_business_process_automation_(bpa)_by_redwood:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Business Process Automation (Bpa) By Redwood (c6024df9-d36c-5b45-aa81-24b9bfded58a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-2401 vulnerable 2026-06-08 05:11:37.039490 Details available
MEDIUM (5.4)
SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.
Published: 2018-03-14T19:00:00.000Z
Updated: 2024-08-05T04:21:32.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2366 vulnerable 2026-06-08 05:11:30.029777 Details available
MEDIUM (4.3)
SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs.
Published: 2018-03-14T19:00:00.000Z
Updated: 2024-08-05T04:14:39.566Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.