CVE-2015-7968: SAP NetWeaver Application Server

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.

Affected products

• SAP NetWeaver Application Server: before 2183189 (fixed in 2183189)

Published 2020-03-09. Last modified 2026-06-17.