CVE-2015-1309 | BDVDB-2026-67658 Detail

Description#

XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATT_DISPLAY_XMLSTRING_REMOTE, aka SAP Note 2016638.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://erpscan.io/advisories/erpscan-15-001-sap-netweaver-ecatt_display_xmlstring_remote-xxe/
http://secunia.com/advisories/62469
https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/

Exploit#

No public exploit known

History#

Version 12015-01-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.