CVE-2015-2813

XML external entity XXE vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358...

Xxe

XML external entity XXE vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513...

Xxe

XML external entity XXE vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358...

CVE-2015-2818

XML external entity XXE vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513...

CVE-2015-2813

XML external entity XXE vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358...

CVE-2015-2818

CVE-2015-2818 describes an XML External Entity (XXE) vulnerability in SAP Mobile Platform 3. The issue arises from XXE processing in XML inputs, allowing a remote attacker to craft XML that can cause requests to internal/intranet servers. The vulnerability is associated with SAP Mobile Platform 3...

CVE-2015-2813

CVE-2015-2813: XXE vulnerability in SAP Mobile Platform. The SAP XML parser at /scc/messagebroker/http improperly processes user-supplied DTDs, enabling remote attackers to disclose information, DoS, or read local files. Affected versions include SAP Mobile Platform 2.2 and 2.3 (likely others). R...

CVE-2015-2812

XML external entity XXE vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966...

CVE-2015-2811: Undefined Security Weakness

XML external entity XXE vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939...

CVE-2015-2818: Undefined Security Weakness

XML external entity XXE vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513...

CVE-2015-2813: Undefined Security Weakness

XML external entity XXE vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358...

PT-2015-5906

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Portal version 7.31.201109172004 Description The issue allows remote attackers to send requests to intranet servers via crafted XML. This is related to an XML external entity XXE vulnerability in ReportXmlViewer. Recommendations...

PT-2015-5907

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Portal version 7.31.201109172004 Description The issue allows remote attackers to send requests to intranet servers via crafted XML, exploiting an XML external entity XXE vulnerability in the XMLValidationComponent. Recommendatio...

PT-2015-5912

Name of the Vulnerable Software and Affected Versions SAP Mobile Platform version 3 Description The issue allows remote attackers to send requests to intranet servers via crafted XML. This is an XML external entity XXE vulnerability. Recommendations For SAP Mobile Platform version 3, update to a...

PT-2015-5908

Name of the Vulnerable Software and Affected Versions SAP Mobile Platform affected versions not specified Description The issue allows remote attackers to send requests to intranet servers via crafted XML, exploiting an XML external entity XXE vulnerability. Recommendations At the moment, there i...

CVE-2015-2812: Undefined Security Weakness

XML external entity XXE vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966...

IT-Grundschutz M4.341: Integritätsschutz ab Windows Vista

IT-Grundschutz M4.341: Integritätsschutz ab Windows Vista. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Soweit technisch möglich umgesetzt aktiviertes UAC und geschützter Modus in verschiedenen Zonen. OpenVAS Vulnerability Test $Id: GSHBM4341.nasl 8004 2017-12-06 09:02:19Z emoss $...

Code injection

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 15.4S and 15.43S allows remote attackers to modify configuration settings or cause a denial of service partial service outage by sending crafted Autonomic Networking AN messages on an intranet network, aka Bug ID CSCup62167...

CVE-2015-0669

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 15.4S and 15.43S allows remote attackers to modify configuration settings or cause a denial of service partial service outage by sending crafted Autonomic Networking AN messages on an intranet network, aka Bug ID CSCup62167...

CVE-2014-9446

Multiple cross-site scripting XSS vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attackers to inject arbitrary web script or HTML via the sortby parameter to the 1 opac parameter in opac-search.pl or 2 intranet parameter in catalogue/search.pl...