CVEvulnerability

CVE-2015-6664

6.8 MEDIUM Published 2015-08-24 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-08-24
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.

Affected configurations

• sap mobile platform 2.3

References

http://packetstormsecurity.com/files/134509/SAP-Mobile-Platform-2.3-XXE-Injection.html packetstormsecurity.com
http://seclists.org/fulldisclosure/2015/Nov/96 seclists.org
http://www.securityfocus.com/archive/1/536954/100/0/threaded www.securityfocus.com
https://erpscan.io/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import/ erpscan.io
http://packetstormsecurity.com/files/134509/SAP-Mobile-Platform-2.3-XXE-Injection.html packetstormsecurity.com
http://seclists.org/fulldisclosure/2015/Nov/96 seclists.org
http://www.securityfocus.com/archive/1/536954/100/0/threaded www.securityfocus.com
https://erpscan.io/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import/ erpscan.io