CVE-2015-7968

nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/…

Medium · published March 9, 2020

CVSS v3.0
6.4
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.

The record
Technical detail
CVSS v3.0
6.4 · MEDIUM
Vector
CVSS:3.0/AC:L/AV:N/A:L/C:L/I:N/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00617 · 48.6th percentile
Published
2020-03-09T13:34Z
EPSS history
Timeline
  • 09 MAR 13:34Z
    nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/…
    cvelistv5