CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2015-8329

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0700%
EPSS Percentile38.26th
Published2015年11月24日
Last Modified2026年5月6日

Vulnerability Description

SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.

Affected Platforms (CPE)

📦
Sap

Manufacturing Integration And Intelligence

= 12.2
📦
Sap

Manufacturing Integration And Intelligence

= 14.0
📦
Sap

Manufacturing Integration And Intelligence

= 15.0

References & Advisories

🔗 http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
🔗 http://seclists.org/fulldisclosure/2016/Feb/68
🔗 https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/
🔗 http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
🔗 http://seclists.org/fulldisclosure/2016/Feb/68
🔗 https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/

相關漏洞威脅

CVE-2019-02678.8

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Ant...

CVE-2016-23897.5

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) compone...

CVE-2016-40166.1

Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remo...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...