Unscored CVE-2015-2813 EUVD-2015-2901GHSA-6rwm-qc5f-6qgc

XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML…

Published Apr 1, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358.

References

20150623 ERPSCAN Research Advisory [ERPSCAN-15-005] SAP Mobile Platform - XXE mailing-list
20150625 [ERPSCAN-15-005] SAP Mobile Platform - XXE mailing-list
73692 vdb-entry
https://erpscan.io/advisories/erpscan-15-005-sap-mobile-platform-xxe/
http://packetstormsecurity.com/files/132357/SAP-Mobile-Platform-2.3-XXE-Injection.html