CVE-2015-2811: Medium severity sap netweaver (enterprise portal) vulnerability
Published Apr 1, 2015
·Updated
XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939.
Affected Software
1 affected component
SAP NetWeaver Enterprise Portal=7.31
Event History
Apr 1, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2811?
CVE-2015-2811 is classified as a medium severity vulnerability due to its potential to expose sensitive intranet information.
2
How do I fix CVE-2015-2811?
To fix CVE-2015-2811, apply the patch provided in SAP Security Note 2111939 to mitigate the XML external entity vulnerability.
3
What systems are affected by CVE-2015-2811?
CVE-2015-2811 affects SAP NetWeaver Portal version 7.31.
4
What type of attack is associated with CVE-2015-2811?
CVE-2015-2811 is associated with XML external entity (XXE) attacks that allow attackers to send requests to intranet servers.
5
Can CVE-2015-2811 lead to data exposure?
Yes, CVE-2015-2811 can lead to data exposure by allowing unauthorized access to internal resources.