CVE-2015-6662: Medium severity sap netweaver vulnerability
Published Aug 24, 2015
·Updated
XML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2168485.
Affected Software
1 affected component
SAP NetWeaver=7.40
Event History
Aug 24, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6662?
CVE-2015-6662 is considered a high severity vulnerability due to its potential for unauthorized file access and other impacts.
2
How do I fix CVE-2015-6662?
To mitigate CVE-2015-6662, apply the relevant patches from SAP as detailed in SAP Security Note 2168485.
3
What systems are affected by CVE-2015-6662?
CVE-2015-6662 affects SAP NetWeaver Portal version 7.40.
4
What type of vulnerability is CVE-2015-6662?
CVE-2015-6662 is an XML external entity (XXE) vulnerability that allows attackers to read arbitrary files.
5
Can CVE-2015-6662 be exploited remotely?
Yes, CVE-2015-6662 can be exploited remotely by sending crafted XML data.