Vulnerabilities > Redwood > SAP Business Process Automation > High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-03-14	CVE-2018-2401	XXE vulnerability in Redwood SAP Business Process Automation 9.00 SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability. network low complexity redwood CWE-611	8.8
2018-03-14	CVE-2018-2400	Unspecified vulnerability in Redwood SAP Business Process Automation 9.00/9.10 Under certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an attacker to access information which would otherwise be restricted. network low complexity redwood	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.