CVE-2015-7968

CVSS 6.4 MEDIUMEPSS 0.6%

nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.

CVSS:3.0/AC:L/AV:N/A:L/C:L/I:N/PR:L/S:C/UI:N

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://labs.integrity.pt/advisories/cve-2015-7968/