CVE-2014-1960

MEDIO 5.0CVE-2014-1960 · Published 14/02/2014 · updated 17/06/2026

In breve

CVE-2014-1960 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda netweaver solution manager (sap).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
netweaver solution manager sap	`= 7.0= 7.1`	No fix yet

Description

The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.

References

scn.sap.com/docs/DOC-8218
secunia.com/advisories/56942 · Vendor Advisory
erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure
exchange.xforce.ibmcloud.com/vulnerabilities/91093
service.sap.com/sap/support/notes/1828885

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free