CVE-2015-2074

HOCH 7.5CVE-2015-2074 · Published 09/08/2021 · updated 17/06/2026

Kurz gesagt

CVE-2015-2074 ist eine Schwachstelle (HOCH (CVSS 7.5)) in businessobjects edge (sap).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.5%, höher als bei 89.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
businessobjects edge sap	`= 4.0`	No fix yet

Description

The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681.

References

packetstormsecurity.com/files/130521/SAP-Business-Objects-Unauthorized-File-Repository-Server-Write.html · Third Party Advisory
seclists.org/fulldisclosure/2015/Feb/93 · Mailing List
securityfocus.com/archive/1/archive/1/534749/100/0/threaded · Third Party Advisory
securityfocus.com/bid/72776 · Third Party Advisory

Weitere Schwachstellen in businessobjects edge

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

businessobjects edge

sap

= 4.0

No fix yet

Weitere Schwachstellen in businessobjects edge

Alle anzeigen →