CVE-2016-6256 SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.in_WCSX/com.sap.b1i....
CriticalCVSS 9.6
EPSS 7.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.in_WCSX/com.sap.b1i.vplatform.runtime/INB_WS_CALL_SYNC_XPT/INB_WS_CALL_SYNC_XPT.ipo/proc, aka SAP Security Note 2378065.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap business one | = 1.2.3 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 98590 third-party-advisory vdb-entry
- 42036 exploit third-party-advisory vdb-entry