CVE Catalog
CVE-2015-7241
CriticalSummary
The XXE vulnerability in SAP Netweaver before version 7.01 allows an attacker to exploit external XML entities to gain access to system data.
Risk Assessment
The organization may be exposed to sensitive data disclosure and attacks on system infrastructure.
Recommendation
It is recommended to upgrade SAP Netweaver to version 7.01 or later to mitigate this vulnerability.
Original NVD description (English source)
XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.