CVE-2016-6256

SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.in_WCSX/com.sap.b1i.vplatform.runtime/INB_WS_CALL_SYNC_XPT/INB_WS_CALL_SYNC_XPT.ipo/proc, aka SAP Security Note 2378065.

• CWE-611

• http://packetstormsecurity.com/files/142597/SAP-Business-One-For-Android-1.2.3-XML-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/98590Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42036/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/142597/SAP-Business-One-For-Android-1.2.3-XML-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/98590Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42036/Exploit, Third Party Advisory, VDB Entry

Published

May 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6250Integer overflow in the ISO9660 writer in libarchive before …
• CVE-2016-6251Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-6252Integer overflow in shadow 4.2.1 allows local users to gain …
• CVE-2016-6253mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through…
• CVE-2016-6254Heap-based buffer overflow in the parse_packet function in n…
• CVE-2016-6255Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote …
• CVE-2016-6257The firmware in Lenovo Ultraslim dongles, as used with Lenov…6.5
• CVE-2016-6258The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earl…
• CVE-2016-6259Xen 4.5.x through 4.7.x do not implement Supervisor Mode Acc…
• CVE-2016-6261The idna_to_ascii_4i function in lib/idna.c in libidn before…
• CVE-2016-6262idn in libidn before 1.33 might allow remote attackers to ob…
• CVE-2016-6263The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in…