Vulnerabilities > SAP > Mobile Platform > 3.0

DATE CVE VULNERABILITY TITLE RISK
2021-08-09 CVE-2015-7731 Information Exposure vulnerability in SAP Mobile Platform 3.0
SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830.
local
low complexity
sap CWE-200
2.1
2020-02-12 CVE-2020-6177 Improper Input Validation vulnerability in SAP Mobile Platform 3.0
SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service.
network
low complexity
sap CWE-20
4.0
2018-09-11 CVE-2018-2459 Unspecified vulnerability in SAP Mobile Platform 3.0
Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by default), occasionally receive some data values of a different user.
network
low complexity
sap
5.0
2015-06-24 CVE-2015-5068 Information Disclosure vulnerability in SAP Mobile Platform 3.0
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.
network
low complexity
sap
7.5
2015-04-01 CVE-2015-2818 XML External Entity Injection vulnerability in SAP Mobile Platform 3.0
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513.
network
low complexity
sap
5.0