CVE-2014-1960

2014-02-1415:00:00

mitre

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.

References

scn.sap.com/docs/DOC-8218

secunia.com/advisories/56942

erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/

exchange.xforce.ibmcloud.com/vulnerabilities/91093

service.sap.com/sap/support/notes/1828885