CVE-2015-2812 | BDVDB-2026-68747 Detail

Description#

XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/535826/100/800/threaded
http://seclists.org/fulldisclosure/2015/Jun/62
https://erpscan.io/advisories/erpscan-15-004-sap-netweaver-portal-xmlvalidationcomponent-xxe/
http://packetstormsecurity.com/files/132356/SAP-NetWeaver-Portal-7.31-XXE-Injection.html

Exploit#

No public exploit known

History#

Version 12015-04-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.