CVE-2013-7095

Published: Dec 13, 2013Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue.

Affected (1)

Products: Sap: Customer Relationship Management

Sap

1 product

Customer Relationship Management

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sap Customer Relationship Management	Version 7.02 ehp2

References (14)

http://scn.sap.com/docs/DOC-8218

Source: cve@mitre.org

http://secunia.com/advisories/56064

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/64265

Source: cve@mitre.org

http://www.securitytracker.com/id/1029488

Source: cve@mitre.org

https://erpscan.io/advisories/erpscan-13-025-sap-crm-crm_flex_data-xxe/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/89703

Source: cve@mitre.org

https://service.sap.com/sap/support/notes/1909665

Source: cve@mitre.org

http://scn.sap.com/docs/DOC-8218