SAP

Businessobjects Explorer

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2014-8315

  • EPSS 0.52%
  • Published 16.10.2014 19:55:20
  • Last modified 12.04.2025 10:46:40

polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.

5

CVE-2014-8316

Exploit
  • EPSS 0.8%
  • Published 16.10.2014 19:55:20
  • Last modified 12.04.2025 10:46:40

XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request.