CVE-2014-3133

EPSS 0.35%
Published 30.04.2014 14:22:07
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

SAP ≫ Netweaver Java Application Server Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.35%	0.547

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://scn.sap.com/docs/DOC-8218

http://seclists.org/fulldisclosure/2014/Apr/301

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-008

http://www.securityfocus.com/bid/67104

https://service.sap.com/sap/support/notes/1922547

https://nvd.nist.gov/vuln/detail/CVE-2014-3133

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3133

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3133

EUVD