Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-6662
HistoryAug 24, 2015 - 2:59 p.m.

CVE-2015-6662

2015-08-2414:59:19
[email protected]
web.nvd.nist.gov
25
cve-2015-6662
xxe
sap
netweaver portal
7.4
xml
vulnerability
remote attackers
arbitrary files
security
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.6%

JSON

XML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2168485.

Affected configurations

NVD
Node
sapnetweaverMatch7.40
CPENameOperatorVersion
sap:netweaversap netweavereq7.40

Related

erpscan 1
zdt 1
cvelist 1
prion 1
packetstorm 1
nvd 1
erpscan
erpscan
SAP NetWeaver 7.4 - XXE
2015-04-16 00:00:00
zdt
zdt
SAP NetWeaver 7.4 XXE Injection Vulnerability
2015-11-23 00:00:00
cvelist
cvelist
CVE-2015-6662
2015-08-24 14:00:00
prion
prion
Xxe
2015-08-24 14:59:00
packetstorm
packetstorm
SAP NetWeaver 7.4 XXE Injection
2015-11-23 00:00:00
nvd
nvd
CVE-2015-6662
2015-08-24 14:59:19

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.6%

JSON
Related for CVE-2015-6662
erpscan1zdt1cvelist1prion1packetstorm1nvd1