CVE-2015-2811

published 2015-04-01

CVE-2015-2811: XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet…

medium 5 CVSS 3.1

AV N AC L Au N C N I P A N

XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	tika	—	—
sap	netweaver_enterprise_portal	—	—