CVE-2015-6664

CVE-2015-6664 affects SAP Mobile Platform 2.3 and potentially others, with an XML External Entity (XXE) vulnerability in the application import feature. An attacker can read arbitrary files on the server by crafting XML data that leverages a DTD. Vulnerable component: the XML parser handling appl...