CVE-2014-8310

HIGH 7.1CVE-2014-8310 · Published 16/10/2014 · updated 17/06/2026

In short

CVE-2014-8310 is a HIGH (CVSS 7.1) vulnerability affecting businessobjects (sap).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
businessobjects sap	`= 4.0`	No fix yet

Description

The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server shutdown) via crafted OSCAFactory::Session ORB message.

References

packetstormsecurity.com/files/128600/SAP-Business-Objects-Denial-Of-Service-Via-CORBA.html
scn.sap.com/docs/DOC-8218 · Vendor Advisory
seclists.org/fulldisclosure/2014/Oct/40
onapsis.com/resources/get.php
securityfocus.com/archive/1/533646/100/0/threaded
securityfocus.com/bid/70308
exchange.xforce.ibmcloud.com/vulnerabilities/96875
service.sap.com/sap/support/notes/2001106 · Vendor Advisory

More vulnerabilities in businessobjects

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

businessobjects

sap

= 4.0

No fix yet

More vulnerabilities in businessobjects

See all →