CVEvulnerability

CVE-2015-6662

6.8 MEDIUM Published 2015-08-24 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-08-24
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

XML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2168485.

Affected configurations

• sap netweaver 7.40

References

http://packetstormsecurity.com/files/134507/SAP-NetWeaver-7.4-XXE-Injection.html packetstormsecurity.com
http://seclists.org/fulldisclosure/2015/Nov/92 seclists.org
http://www.securityfocus.com/archive/1/536957/100/0/threaded www.securityfocus.com
https://erpscan.io/advisories/erpscan-15-018-sap-netweaver-7-4-xxe/ erpscan.io
http://packetstormsecurity.com/files/134507/SAP-NetWeaver-7.4-XXE-Injection.html packetstormsecurity.com
http://seclists.org/fulldisclosure/2015/Nov/92 seclists.org
http://www.securityfocus.com/archive/1/536957/100/0/threaded www.securityfocus.com
https://erpscan.io/advisories/erpscan-15-018-sap-netweaver-7-4-xxe/ erpscan.io