CVE

Id
81368  
CVE No.
CVE-2015-4091  
Status
Candidate  
Description
XML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecified other impact via an XML request to tc~sld~wd~main/Main, related to "CIM UPLOAD," aka SAP Security Note 2090851.  
Phase
Assigned (20150526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
732142 81368 CVE-2015-4091 BUGTRAQ:20150817 [ERPSCAN-15-013] SAP NetWeaver AS Java CIM UPLOAD â?? XXE  View
732143 81368 CVE-2015-4091 URL:http://www.securityfocus.com/archive/1/archive/1/536239/100/0/threaded  View
732144 81368 CVE-2015-4091 FULLDISC:20150522 SAP Security Notes May 2015  View
732145 81368 CVE-2015-4091 URL:http://seclists.org/fulldisclosure/2015/May/96  View
732146 81368 CVE-2015-4091 MISC:http://erpscan.com/advisories/erpscan-15-013-sap-netweaver-as-java-cim-upload-xxe  View
732147 81368 CVE-2015-4091 MISC:http://packetstormsecurity.com/files/133122/SAP-NetWeaver-AS-Java-XXE-Injection.html  View
732148 81368 CVE-2015-4091 BID:74850  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7841 JVNDB-2015-003161 hostapd および wpa_supplicant の EAP-pwd サーバおよびピアの実装におけるサービス運用妨害 (DoS) の脆弱性 hostapd および wpa_supplicant の EAP-pwd サーバおよびピアの実装には、サービス運用妨害 (out-of-bounds read およびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-4143 81368 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003161.html  View