#xxe

1 article

Security Alerts Nov 10, 2026

CVE-2026-109798: XXE in SAP BusinessObjects BI Platform (Web Intelligence)

Web Intelligence in SAP BusinessObjects BI Platform does not restrict XML external entity resolution in OLAP connection requests. An authenticated attacker can read server files and reach internal systems...