SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.
sap identity management 8.0
sap identity management 7.2