Unrated severityNVD Advisory· Published Apr 1, 2015· Updated Jun 17, 2026

CVE-2015-2811

Description

XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/NetWeaver Enterprise Portal Federated Portal Network
cpe:2.3:a:sap:netweaver_enterprise_portal:7.31:*:*:*:*:*:*:*
SAP/Netweaver Portalllm-fuzzy
Range: =7.31.201109172004

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/132358/SAP-NetWeaver-Portal-7.31-XXE-Injection.htmlnvd
seclists.org/fulldisclosure/2015/Jun/64nvd
www.securityfocus.com/archive/1/535827/100/800/threadednvd
www.securityfocus.com/bid/73691nvd
erpscan.io/advisories/erpscan-15-006-sap-netweaver-portal-reportxmlviewer-xxe/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000