Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-2812
HistoryApr 01, 2015 - 2:59 p.m.

CVE-2015-2812

2015-04-0114:59:11
[email protected]
web.nvd.nist.gov
3

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

73.8%

JSON

XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966.

Affected configurations

Nvd
Node
sapnetweaver_enterprise_portalMatch7.31
VendorProductVersionCPE
sapnetweaver_enterprise_portal7.31cpe:2.3:a:sap:netweaver_enterprise_portal:7.31:*:*:*:*:*:*:*

Related

cve 1
securityvulns 2
cvelist 1
erpscan 1
prion 1
kaspersky 1
cve
cve
CVE-2015-2812
2015-04-01 14:59:11
securityvulns
securityvulns
[ERPSCAN-15-004] SAP NetWeaver Portal XMLValidationComponent - XXE
2015-06-29 00:00:00
SAP NetWeather multiple security vulnerabilities
2015-06-29 00:00:00
cvelist
cvelist
CVE-2015-2812
2015-04-01 14:00:00
erpscan
erpscan
SAP NetWeaver Portal XMLValidationComponent - XXE
2014-06-11 00:00:00
prion
prion
Xxe
2015-04-01 14:59:00
kaspersky
kaspersky
KLA10526 Multiple vulnerabilities in SAP products
2015-04-01 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

73.8%

JSON
Related for NVD:CVE-2015-2812
cve1securityvulns2cvelist1erpscan1prion1kaspersky1