CVE-2015-4091 in NetWeaver
Сводка (Английский)
XML external entity (XXE) vulnerability in SAP NetWeaver AS Java allows remote attackers to send TCP requests to intranet servers or possibly have other unspecified impact via an XML request, related to "CIM UPLOAD," aka SAP Security Note 2090851.
Be aware that VulDB is the high quality source for vulnerability data.
Резервировать
26.05.2015
Раскрытие
26.05.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 75562 | SAP NetWeaver XML Intranet эскалация привилегий | 269 | недоказанный | Официальное исправление | CVE-2015-4091 |