CVE-2015-4091 in SAP NetWeaver
Resumen (Inglés)
XML external entity (XXE) vulnerability in SAP NetWeaver AS Java allows remote attackers to send TCP requests to intranet servers or possibly have other unspecified impact via an XML request, related to "CIM UPLOAD," aka SAP Security Note 2090851.
Reservar
2015-05-26
Divulgación
2015-05-26
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 75562 | SAP NetWeaver XML Intranet escalada de privilegios | 269 | No probado | Arreglo oficial | CVE-2015-4091 |