SAP

Mobile Platform

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2015-7731

  • EPSS 0.06%
  • Veröffentlicht 09.08.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 02:37:18

SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830.

4.3

CVE-2020-6177

  • EPSS 0.29%
  • Veröffentlicht 12.02.2020 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:35:14

SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity resolving, there is no issue of...

7.5

CVE-2018-2459

  • EPSS 0.37%
  • Veröffentlicht 11.09.2018 15:29:01
  • Zuletzt bearbeitet 21.11.2024 04:03:51

Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by default), occasionally receive some data values of a different user.

7.5

CVE-2015-8600

  • EPSS 0.32%
  • Veröffentlicht 17.12.2015 19:59:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.

6.8

CVE-2015-6664

  • EPSS 0.64%
  • Veröffentlicht 24.08.2015 14:59:21
  • Zuletzt bearbeitet 12.04.2025 10:46:40

XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.

7.5

CVE-2015-5068

  • EPSS 0.96%
  • Veröffentlicht 24.06.2015 14:59:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.

5

CVE-2015-2818

  • EPSS 0.37%
  • Veröffentlicht 01.04.2015 14:59:16
  • Zuletzt bearbeitet 12.04.2025 10:46:40

XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513.

5

CVE-2015-2813

  • EPSS 0.54%
  • Veröffentlicht 01.04.2015 14:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358.