CVE-2015-5068
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read...
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.
Exploit likelihood
What each source reports
NVD Score used
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.
- Record
CVE-2015-5068- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.
- Record
CVE-2015-5068- Updated
- 2026-11-02
EUVDEUVD-2015-5084 No score
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.
- Record
EUVD-2015-5084- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h548-2rxv-x7x7 No score
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read...
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.
- Record
GHSA-h548-2rxv-x7x7- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5068 is a high vulnerability (CVSS 7.5) in Sap Mobile Platform, published June 24, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. No source names a fixed version.
References
packetstormsecurity.com/files/133514/SAP-Mobile-Platform-3-XXE-Injection.html
securityfocus.com/bid/75166
erpscan.io/advisories/erpscan-15-014-sap-mobile-platform-3-xxe-in-add-repository
scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015
seclists.org/fulldisclosure/2015/Sep/36
nvd.nist.gov/vuln/detail/CVE-2015-5068
github.com/advisories/GHSA-h548-2rxv-x7x7