{"api_version":"1","generated_at":"2026-07-24T20:49:43+00:00","cve":"CVE-2015-8600","urls":{"html":"https://cve.report/CVE-2015-8600","api":"https://cve.report/api/cve/CVE-2015-8600.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-8600","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-8600"},"summary":{"title":"CVE-2015-8600","description":"The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.","state":"PUBLISHED","assigner":"mitre","published_at":"2015-12-17 19:59:12","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review","name":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"SAP Security Notes December 2015 - Review - SAP Blogs","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://erpscan.io/advisories/10761/","name":"https://erpscan.io/advisories/10761/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[ERPSCAN-15-033] SAP Mobile Platform - Unauthenticated access vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8600","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8600","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"8600","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sap","cpe5":"mobile_platform","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T08:20:43.524Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://erpscan.io/advisories/10761/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-12-08T00:00:00.000Z","descriptions":[{"lang":"en","value":"The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-12-10T17:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review"},{"tags":["x_refsource_MISC"],"url":"https://erpscan.io/advisories/10761/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2015-8600","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review","refsource":"MISC","url":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review"},{"name":"https://erpscan.io/advisories/10761/","refsource":"MISC","url":"https://erpscan.io/advisories/10761/"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2015-8600","datePublished":"2015-12-17T19:00:00.000Z","dateReserved":"2015-12-17T00:00:00.000Z","dateUpdated":"2024-08-06T08:20:43.524Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-12-17 19:59:12","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:mobile_platform:*:*:*:*:*:*:*:*","matchCriteriaId":"E4E8959F-4967-42D0-A743-AB4C10740B21"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"8600","Ordinal":"1","Title":"CVE-2015-8600","CVE":"CVE-2015-8600","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"8600","Ordinal":"1","NoteData":"The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.","Type":"Description","Title":"CVE-2015-8600"},{"CveYear":"2015","CveId":"8600","Ordinal":"2","NoteData":"2015-12-17","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"8600","Ordinal":"3","NoteData":"2018-12-10","Type":"Other","Title":"Modified"}]}}}