SAP NetWeaver version 7.4 suffers from an XML external entity injection vulnerability. Continue reading...