CVE-2014-8316

中危 5.0CVE-2014-8316 · Published 16/10/2014 · updated 17/06/2026

要点

CVE-2014-8316 是影响 businessobjects explorer (sap) 的中危 (CVSS 5.0)漏洞。
未来 30 天内被利用的概率（EPSS）：2.8%，高于 86.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
businessobjects explorer sap	`= 14.0.5`	No fix yet

Description

XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request.

References

packetstormsecurity.com/files/128633/SAP-BusinessObjects-Explorer-14.0.5-XXE-Injection.html · Exploit
scn.sap.com/docs/DOC-55451 · Vendor Advisory
seclists.org/fulldisclosure/2014/Oct/50 · Exploit
csnc.ch/misc/files/advisories/CSNC-2013-018_SAP_BusinessObjects_Explorer_XXE.txt · Exploit
securityfocus.com/archive/1/533673/100/0/threaded
securityfocus.com/bid/70384
exchange.xforce.ibmcloud.com/vulnerabilities/96933
service.sap.com/sap/support/notes/1908531 · Vendor Advisory

businessobjects explorer 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free