packetstormsecurity.com
http://packetstormsecurity.com/files/133627/SAP-Netweaver-XML-External-Entity-Injection.html CVE-2015-7241
CRITICAL
SAP NetWeaver < 7.01 - XML External Entity Injection
Record summary
CVE-2015-7241 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSAP NetWeaver < 7.01 - XML External Entity InjectionExploitDB exploitby Lukasz MiedzinskiNot analyzed1 file
References
520150921 SAP Netwaver - XML External Entity Injectionmailing list
http://www.securityfocus.com/archive/1/536504/100/0/threaded 76809vdb entry
http://www.securityfocus.com/bid/76809 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2015-7241 38261exploit
https://www.exploit-db.com/exploits/38261