Описание
XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358.
XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2015-2813
- https://erpscan.io/advisories/erpscan-15-005-sap-mobile-platform-xxe
- http://packetstormsecurity.com/files/132357/SAP-Mobile-Platform-2.3-XXE-Injection.html
- http://seclists.org/fulldisclosure/2015/Jun/63
- http://www.securityfocus.com/archive/1/535828/100/800/threaded
- http://www.securityfocus.com/bid/73692
EPSS
Процентиль: 67%
0.0054
Низкий
CVE ID
Связанные уязвимости
nvd
почти 11 лет назад
XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358.
EPSS
Процентиль: 67%
0.0054
Низкий