CVE-2015-2075

概要

参考情報

• packetstormsecurity.com/files/130522/SAP-Business-Objects-Unauthorized-Audit-Information-Delete.html · Third Party Advisory
• seclists.org/fulldisclosure/2015/Feb/95 · Third Party Advisory
• securityfocus.com/archive/1/534751/100/0/threaded
• securityfocus.com/bid/72778 · Third Party Advisory

businessobjects edge のその他の脆弱性

• CVE-2015-2074高 7.5The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a f…
• CVE-2015-2073高 7.5The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full …
• CVE-2014-9320緊急 9.8SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM …
• CVE-2015-7730緊急 10.0SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial…
• CVE-2015-2076中 5.0The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka …