CVE-2014-8590
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application...
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.
Exploit likelihood
What each source reports
NVD Score used
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.
- Record
CVE-2014-8590- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.
- Record
CVE-2014-8590- Updated
- 2026-11-02
EUVDEUVD-2014-8427 No score
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.
- Record
EUVD-2014-8427- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v2w7-7242-g84q No score
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application...
XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via a crafted request.
- Record
GHSA-v2w7-7242-g84q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-8590 is a medium vulnerability (CVSS 4.3) in Sap Netweaver Java Application Server, published November 4, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.15%, the 82nd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/98581
service.sap.com/sap/support/notes/2045176
securityfocus.com/bid/71023
erpscan.io/press-center/blog/sap-critical-patch-update-october-2014
blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition
nvd.nist.gov/vuln/detail/CVE-2014-8590
github.com/advisories/GHSA-v2w7-7242-g84q