CVE-2014-8315

MEDIO 5.0CVE-2014-8315 · Published 16/10/2014 · updated 17/06/2026

In breve

CVE-2014-8315 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda businessobjects explorer (sap).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
businessobjects explorer sap	`= 14.0.5`	No fix yet

Description

polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.

References

seclists.org/fulldisclosure/2014/Oct/48
csnc.ch/misc/files/advisories/CSNC-2013-016_SAP_BusinessObjects_Explorer_Port-Scanning.txt
securityfocus.com/archive/1/533672/100/0/threaded
securityfocus.com/bid/70382
exchange.xforce.ibmcloud.com/vulnerabilities/96935
service.sap.com/sap/support/notes/1908562 · Vendor Advisory

Altre vulnerabilità di businessobjects explorer

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free