SAP NetWeaver AS JAVA version 7.4 suffers from an XML external entity (XXE) injection vulnerability. Continue reading...