SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netweaver | Sap | 7.10 (including) | 7.10 (including) |
| Netweaver | Sap | 7.11 (including) | 7.11 (including) |
| Netweaver | Sap | 7.20 (including) | 7.20 (including) |
| Netweaver | Sap | 7.30 (including) | 7.30 (including) |
| Netweaver | Sap | 7.31 (including) | 7.31 (including) |
| Netweaver | Sap | 7.40 (including) | 7.40 (including) |
| Netweaver | Sap | 7.50 (including) | 7.50 (including) |