CVEvulnerability

CVE-2015-2812

5.0 MEDIUM Published 2015-04-01 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-04-01
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966.

Affected configurations

• sap netweaver enterprise portal 7.31

References

http://packetstormsecurity.com/files/132356/SAP-NetWeaver-Portal-7.31-XXE-Injection.html packetstormsecurity.com
http://seclists.org/fulldisclosure/2015/Jun/62 seclists.org
http://www.securityfocus.com/archive/1/535826/100/800/threaded www.securityfocus.com
https://erpscan.io/advisories/erpscan-15-004-sap-netweaver-portal-xmlvalidationcomponent-xxe/ erpscan.io
http://packetstormsecurity.com/files/132356/SAP-NetWeaver-Portal-7.31-XXE-Injection.html packetstormsecurity.com
http://seclists.org/fulldisclosure/2015/Jun/62 seclists.org
http://www.securityfocus.com/archive/1/535826/100/800/threaded www.securityfocus.com
https://erpscan.io/advisories/erpscan-15-004-sap-netweaver-portal-xmlvalidationcomponent-xxe/ erpscan.io