Lucene search

K
nvd[email protected]NVD:CVE-2015-2811
HistoryApr 01, 2015 - 2:59 p.m.

CVE-2015-2811

2015-04-0114:59:09
web.nvd.nist.gov
3

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

72.9%

XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939.

Affected configurations

Nvd
Node
sapnetweaver_enterprise_portalMatch7.31
VendorProductVersionCPE
sapnetweaver_enterprise_portal7.31cpe:2.3:a:sap:netweaver_enterprise_portal:7.31:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

72.9%