CVE

Id
83941  
CVE No.
CVE-2015-6664  
Status
Candidate  
Description
XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.  
Phase
Assigned (20150824)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
745318 83941 CVE-2015-6664 BUGTRAQ:20151123 [ERPSCAN-15-020] SAP Mobile Platform 2.3 - XXE in application import  View
745319 83941 CVE-2015-6664 URL:http://www.securityfocus.com/archive/1/archive/1/536954/100/0/threaded  View
745320 83941 CVE-2015-6664 FULLDISC:20151124 [ERPSCAN-15-020] SAP Mobile Platform 2.3 - XXE in application import  View
745321 83941 CVE-2015-6664 URL:http://seclists.org/fulldisclosure/2015/Nov/96  View
745322 83941 CVE-2015-6664 MISC:http://erpscan.com/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import/  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9953 JVNDB-2015-005273 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat の ANSendForFormDistribution メソッドにおける JavaScript API 実行の制限を回避される脆弱性 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat の ANSendForFormDistribution メソッドには、JavaScript API 実行の制限を回避される脆弱性が存在します。 CVE-2015-6716 83941 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005273.html  View