PT-2015-5906
CVE-2015-2811
·
تاريخ النشر
2015-04-01
·
تاريخ التحديث
2018-12-10
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Portal version 7.31.201109172004
Description
The issue allows remote attackers to send requests to intranet servers via crafted XML. This is related to an XML external entity (XXE) vulnerability in ReportXmlViewer.
Recommendations
For SAP NetWeaver Portal version 7.31.201109172004, apply the fix as described in SAP Security Note 2111939 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾