CVE-2015-8600

SAP Mobile Platform - Authentication Bypass and Privilege Escalation via SysAdminWebTool Servlets

Title source: llm

Description

The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review

Third Party Advisory x_refsource_misc

https://erpscan.io/advisories/10761/

Scores

EPSS 0.0032

EPSS Percentile 55.2%

Details

CWE

CWE-264

Status published

Products (1)

sap/mobile_platform

Published Dec 17, 2015

Tracked Since Feb 18, 2026