Lucene search
MitreCVE-2010-3982HistoryOct 18, 2010 - 5:00 p.m.
CVE-2010-3982
2010-10-1817:00:04
CWE-200
mitre
web.nvd.nist.gov
25
sap
businessobjects
xi 3.2
cve-2010-3982
internal port scanning
security vulnerability
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.4%
SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an “internal port scanning” issue.
Affected configurations
Node
sapbusinessobjectsMatch3.2enterprise_xi
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | businessobjects | 3.2 | cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2010-3982
2010-10-18 16:00:00
prion
prion
Design/Logic Flaw
2010-10-18 17:00:00
nvd
nvd
CVE-2010-3982
2010-10-18 17:00:04
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.4%
Related for CVE-2010-3982