CVE-2015-4091: High severity sap netweaver application server java vulnerability
XML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecified other impact via an XML request to tc~sld~wd~main/Main, related to "CIM UPLOAD," aka SAP Security Note 2090851.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4091?
CVE-2015-4091 is classified as a critical severity vulnerability due to its potential to lead to unauthorized access and actions on the intranet.
How do I fix CVE-2015-4091?
To mitigate CVE-2015-4091, it is recommended to apply the relevant patches provided by SAP as per SAP Security Note 2090851.
What systems are affected by CVE-2015-4091?
CVE-2015-4091 specifically affects SAP NetWeaver AS Java version 7.4.
What type of attack does CVE-2015-4091 enable?
CVE-2015-4091 allows remote attackers to send unauthorized TCP requests to internal servers.
Is CVE-2015-4091 considered an XML external entity attack?
Yes, CVE-2015-4091 is a type of XML external entity (XXE) vulnerability.