6.8

CVE-2015-6664

XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Mobile Platform Version 2.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.64% 0.732
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://packetstormsecurity.com/files/134509/SAP-Mobile-Platform-2.3-XXE-Injection.html
http://seclists.org/fulldisclosure/2015/Nov/96
http://www.securityfocus.com/archive/1/536954/100/0/threaded
https://erpscan.io/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import/