Lucene search
HistoryOct 18, 2010 - 5:00 p.m.
CVE-2010-3982
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
High
EPSS
0.005
Percentile
76.4%
SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an “internal port scanning” issue.
Affected configurations
Node
sapbusinessobjectsMatch3.2enterprise_xi
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | businessobjects | 3.2 | cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2010-10-18 17:00:00
cvelist
cvelist
CVE-2010-3982
2010-10-18 16:00:00
cve
cve
CVE-2010-3982
2010-10-18 17:00:04
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
High
EPSS
0.005
Percentile
76.4%
Related for NVD:CVE-2010-3982