SAP Disclosure Management 10.1 allows an malicious user to upload any file without proper file format validation.
sap disclosure management 10.1