CVE-2015-6664

概要

参考情報

• packetstormsecurity.com/files/134509/SAP-Mobile-Platform-2.3-XXE-Injection.html
• seclists.org/fulldisclosure/2015/Nov/96
• securityfocus.com/archive/1/536954/100/0/threaded
• erpscan.io/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import

mobile platform のその他の脆弱性

• CVE-2015-7731中 5.5SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP S…
• CVE-2020-6177中 4.3SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to parti…
• CVE-2018-2459高 7.5Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by defa…
• CVE-2015-5068高 7.5XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unsp…
• CVE-2015-2818中 5.0XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XM…