CVE-2015-5068

High

Published: 24/06/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The XXE vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive data, potentially leading to serious security breaches.

Recommendation

It is recommended to update to the latest version of SAP Mobile Platform and implement appropriate security measures to protect against XXE attacks.

Other vulnerabilities in SAP Mobile Platform 3

CVE-2015-8600High
The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication, enabling them to obtain sensitive information, gain privileges, or have unspecified other impacts.

Original NVD description (English source)

XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.