CVE-2015-6664: Medium severity sap mobile platform sdk vulnerability
XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6664?
CVE-2015-6664 has a medium severity rating due to its potential impact on confidentiality through arbitrary file reading.
How can I mitigate CVE-2015-6664?
Mitigation for CVE-2015-6664 involves validating XML input and disabling external entity processing in the application.
What systems are affected by CVE-2015-6664?
CVE-2015-6664 affects SAP Mobile Platform version 2.3.
Can CVE-2015-6664 lead to remote code execution?
CVE-2015-6664 does not directly lead to remote code execution but can allow reading sensitive files which may lead to further compromise.
Is there a patch available for CVE-2015-6664?
Yes, SAP has provided security updates to address CVE-2015-6664 as mentioned in SAP Security Note 2152227.