3.5

CVE-2014-5174

The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.86% 0.764
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://scn.sap.com/docs/DOC-8218
http://packetstormsecurity.com/files/127671/SAP-Netweaver-Business-Warehouse-Missing-Authorization.html
http://seclists.org/fulldisclosure/2014/Jul/154
http://secunia.com/advisories/59635
http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-026
http://www.securityfocus.com/bid/68955
https://exchange.xforce.ibmcloud.com/vulnerabilities/94921
https://service.sap.com/sap/support/notes/1974016