critical9.8Public exploit code
CVE-2015-7241
XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP NetWeaver < 7.01 - XML External Entity Injection2015-09-22 · webapps · xml
Impact
XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver | through 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/133627/SAP-Netweaver-XML-External-Entity-Injection.html
- http://www.securityfocus.com/archive/1/536504/100/0/threaded
- http://www.securityfocus.com/bid/76809
- https://www.exploit-db.com/exploits/38261/
- http://packetstormsecurity.com/files/133627/SAP-Netweaver-XML-External-Entity-Injection.html
- http://www.securityfocus.com/archive/1/536504/100/0/threaded
- http://www.securityfocus.com/bid/76809
- https://www.exploit-db.com/exploits/38261/