CVE-2015-5068

Description

References

• packetstormsecurity.com/files/133514/SAP-Mobile-Platform-3-XXE-Injection.html
• scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015 · Vendor Advisory
• seclists.org/fulldisclosure/2015/Sep/36
• securityfocus.com/bid/75166
• erpscan.io/advisories/erpscan-15-014-sap-mobile-platform-3-xxe-in-add-repository

More vulnerabilities in mobile platform

• CVE-2015-7731MEDIUM 5.5SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP S…
• CVE-2020-6177MEDIUM 4.3SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to parti…
• CVE-2018-2459HIGH 7.5Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by defa…
• CVE-2015-6664MEDIUM 6.8XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read a…
• CVE-2015-2818MEDIUM 5.0XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XM…