CVE-2014-5171

EPSS 0.4%
Veröffentlicht 31.07.2014 14:55:04
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Hana Extended Application Services Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.4%	0.577

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.9	5.5	2.9	AV:A/AC:M/Au:N/C:P/I:N/A:N

http://scn.sap.com/docs/DOC-8218

http://packetstormsecurity.com/files/127666/SAP-HANA-XS-Missing-Encryption.html

http://seclists.org/fulldisclosure/2014/Jul/149

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-021

http://www.securityfocus.com/archive/1/532940/100/0/threaded

http://www.securityfocus.com/bid/68947

https://service.sap.com/sap/support/notes/1963932

https://nvd.nist.gov/vuln/detail/CVE-2014-5171

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-5171

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-5171

EUVD