Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-12	CVE-2020-6177	Improper Input Validation vulnerability in SAP Mobile Platform 3.0 SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. network low complexity sap CWE-20	4.0
2018-09-11	CVE-2018-2459	Unspecified vulnerability in SAP Mobile Platform 3.0 Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by default), occasionally receive some data values of a different user. network low complexity sap	5.0
2015-08-24	CVE-2015-6664	Unspecified vulnerability in SAP Mobile Platform 2.3 XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227. network sap	6.8
2015-04-01	CVE-2015-2818	XML External Entity Injection vulnerability in SAP Mobile Platform 3.0 XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513. network low complexity sap	5.0
2015-04-01	CVE-2015-2813	XML External Entity Injection vulnerability in SAP Mobile Platform XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358. network low complexity sap	5.0