VULNERABILITY INTELLIGENCE

CVE-2015-2811

CVSS score5 MEDIUM

EPSS probability2.38%

CISA KEVNot currently listed

Published2015-04-01

Last modified2026-06-17

Description

XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939.