Mobile Platform

mobile_platform

Vendor: Sap • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-7731 1Sap 1Mobile Platform Nov 21, 2024 Aug 9, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830.
CVE-2020-6177 1Sap 1Mobile Platform Jun 17, 2026 Feb 12, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity r...Show more SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity resolving, there is no issue of leaking content of files on the server.Show less
CVE-2018-2459 1Sap 1Mobile Platform Nov 21, 2024 Sep 11, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by default), occasionally receive some data values of a different user.
CVE-2015-8600 1Sap 1Mobile Platform May 6, 2026 Dec 17, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Securit...Show more The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.Show less
CVE-2015-6664 1Sap 1Mobile Platform May 6, 2026 Aug 24, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data,...Show more XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227.Show less
CVE-2015-5068 1Sap 1Mobile Platform May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.
CVE-2015-2818 1Sap 1Mobile Platform May 6, 2026 Apr 1, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513.
CVE-2015-2813 1Sap 1Mobile Platform May 6, 2026 Apr 1, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358.