CVE-2014-8310

EPSS 3.52%
Published 16.10.2014 19:55:19
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server shutdown) via crafted OSCAFactory::Session ORB message.

Affected products Warnungen 0 Metrics 2 CWE 1 References 11

Data is provided by the National Vulnerability Database (NVD)

SAP ≫ Businessobjects Version4.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.52%	0.865

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://scn.sap.com/docs/DOC-8218

Vendor Advisory

http://packetstormsecurity.com/files/128600/SAP-Business-Objects-Denial-Of-Service-Via-CORBA.html

http://seclists.org/fulldisclosure/2014/Oct/40

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-030

http://www.securityfocus.com/archive/1/533646/100/0/threaded

http://www.securityfocus.com/bid/70308

https://exchange.xforce.ibmcloud.com/vulnerabilities/96875

https://service.sap.com/sap/support/notes/2001106

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-8310

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8310

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8310

EUVD