CyberSec.Space Logo
Back to CVE Browser

CVE-2015-8329

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0700%
EPSS Percentile38.26th
PublishedNov 24, 2015
Last ModifiedMay 6, 2026

Vulnerability Description

SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.

Affected Platforms (CPE)

📦
Sap

Manufacturing Integration And Intelligence

= 12.2
📦
Sap

Manufacturing Integration And Intelligence

= 14.0
📦
Sap

Manufacturing Integration And Intelligence

= 15.0

References & Advisories

🔗 http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
🔗 http://seclists.org/fulldisclosure/2016/Feb/68
🔗 https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/
🔗 http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
🔗 http://seclists.org/fulldisclosure/2016/Feb/68
🔗 https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/

Related Vulnerabilities

CVE-2019-02678.8

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Ant...

CVE-2016-23897.5

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) compone...

CVE-2016-40166.1

Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remo...

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...