Mobile Platform (Sap) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2021-08-09. Vendor: Sap.

CVEs of Mobile Platform

• CVE-2015-7731 - CVSS 5.5 (medium), 2021-08-09: SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note…
• CVE-2020-6177 - CVSS 4.3 (medium), 2020-02-12: SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of…
• CVE-2018-2459 - CVSS 7.5 (high), 2018-09-11: Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by default), occasionally…
• CVE-2015-8600 - CVSS 7.5 (high), 2015-12-17: The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have…
• CVE-2015-6664 - CVSS 6.8 (medium), 2015-08-24: XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and…
• CVE-2015-5068 - CVSS 7.5 (high), 2015-06-24: XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via…
• CVE-2015-2818 - CVSS 5 (medium), 2015-04-01: XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP…
• CVE-2015-2813 - CVSS 5 (medium), 2015-04-01: XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security…