CVE-2015-2818: SAP Mobile Platform

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513.

Affected products

• SAP Mobile Platform: version 3.0 only

Published 2015-04-01. Last modified 2026-06-17.