https://cloud.securitybridge.com/advisory/detail/3000291
SAP Security Note 3000291 - SecurityBridge Cloud
SAP EPM add-in allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that...
sap securitynotesecuritybridgecloud