SAP NetWeaver Portal XXE Information Disclosure Vulnerability

SAP NetWeaver is the technology foundation for SAP Business Suite solutions, SAP xApps portfolio applications, partner solutions, and customized applications. An XL External Entity Reference vulnerability exists in SAP NetWeaver Portal ReportXmlViewer, which allows remote attackers to submit...

Xxe

XML external entity XXE vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939...

CVE-2015-2811: Undefined Security Weakness

XML external entity XXE vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939...

PT-2015-5906

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Portal version 7.31.201109172004 Description The issue allows remote attackers to send requests to intranet servers via crafted XML. This is related to an XML external entity XXE vulnerability in ReportXmlViewer. Recommendations...