Lucene search
HistoryApr 30, 2014 - 2:22 p.m.
CVE-2014-3133
sap
netweaver
java
application server
remote attackers
webdynpro
cve-2014-3133
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection.
Affected configurations
Node
sapnetweaver_java_application_serverMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:netweaver_java_application_server | sap netweaver java application server | eq | - |
Related
prion
prion
Design/Logic Flaw
2014-04-30 14:22:00
cvelist
cvelist
CVE-2014-3133
2014-04-30 14:00:00
nvd
nvd
CVE-2014-3133
2014-04-30 14:22:07
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
Related for CVE-2014-3133