Lucene search

MitreCVE-2014-8310

HistoryOct 16, 2014 - 7:55 p.m.

CVE-2014-8310

2014-10-1619:55:19

CWE-20

mitre

web.nvd.nist.gov

cve-2014-8310

sap businessobjects bi edge 4.0

cms

corba

listener

denial of service

oscafactory::session orb message

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.034

Percentile

91.5%

JSON

The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server shutdown) via crafted OSCAFactory::Session ORB message.

Affected configurations

Nvd

Node

sapbusinessobjectsMatch4.0

VendorProductVersionCPE
sapbusinessobjects4.0cpe:2.3:a:sap:businessobjects:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	businessobjects	4.0	cpe:2.3:a:sap:businessobjects:4.0:::::::*

References

packetstormsecurity.com/files/128600/SAP-Business-Objects-Denial-Of-Service-Via-CORBA.html

scn.sap.com/docs/DOC-8218

seclists.org/fulldisclosure/2014/Oct/40

www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-030

www.securityfocus.com/archive/1/533646/100/0/threaded

www.securityfocus.com/bid/70308

exchange.xforce.ibmcloud.com/vulnerabilities/96875

service.sap.com/sap/support/notes/2001106

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.034

Percentile

91.5%

JSON

Related for CVE-2014-8310