NVD

Id
27515  
Name
CVE-2015-6664  
Description
XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-24  
Modified Date
2016-12-07  
Seq
2015-6664  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
144336 27515 CVE-2015-6664 http://erpscan.com/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import/  View
144337 27515 CVE-2015-6664 http://packetstormsecurity.com/files/134509/SAP-Mobile-Platform-2.3-XXE-Injection.html  View
144338 27515 CVE-2015-6664 20151124 [ERPSCAN-15-020] SAP Mobile Platform 2.3 - XXE in application import  View
144339 27515 CVE-2015-6664 20151123 [ERPSCAN-15-020] SAP Mobile Platform 2.3 - XXE in application import  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9154 JVNDB-2015-004474 SAP Mobile Platform のアプリケーションインポート機能における XML 外部エンティティの脆弱性 SAP Mobile Platform のアプリケーションインポート機能には、XML 外部エンティティ (XXE) の脆弱性が存在します。 CVE-2015-6664 83889 CVE-2015-6664 27515 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004474.html 2015-08-11 2015-08-28 View