CVE-2015-6664
- State
- Published
- Severity
- Not scored
- Published
- Aug 24, 2015
- Updated
- Aug 6, 2024
- Reserved
- Aug 24, 2015
Description
XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://erpscan.io/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import/
- 20151123 [ERPSCAN-15-020] SAP Mobile Platform 2.3 - XXE in application importmailing-list
- 20151124 [ERPSCAN-15-020] SAP Mobile Platform 2.3 - XXE in application importmailing-list
- http://packetstormsecurity.com/files/134509/SAP-Mobile-Platform-2.3-XXE-Injection.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.