CVE-2015-1312

EPSS 0.46%
Veröffentlicht 22.01.2015 16:59:08
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privileges, and possibly have other unspecified impact via unknown vectors, aka SAP Note 2000401.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Enterprise Resource Planning Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.46%	0.612

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/

https://nvd.nist.gov/vuln/detail/CVE-2015-1312

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1312

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1312

EUVD