CVE-2015-6662

2015-08-2414:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.6%

JSON

XML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2168485.

References

packetstormsecurity.com/files/134507/SAP-NetWeaver-7.4-XXE-Injection.html

seclists.org/fulldisclosure/2015/Nov/92

www.securityfocus.com/archive/1/536957/100/0/threaded

erpscan.io/advisories/erpscan-15-018-sap-netweaver-7-4-xxe/