Vulnerabilities > SAP > Businessobjects Edge > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-08-09 CVE-2015-2073 Path Traversal vulnerability in SAP Businessobjects Edge 4.0
The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682.
network
low complexity
sap CWE-22
5.0
2021-08-09 CVE-2015-2074 Path Traversal vulnerability in SAP Businessobjects Edge 4.0
The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681.
network
low complexity
sap CWE-22
5.0
2015-02-27 CVE-2015-2076 Information Exposure vulnerability in SAP Businessobjects Edge 4.0
The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.
network
low complexity
sap CWE-200
5.0
2015-02-27 CVE-2015-2075 Permissions, Privileges, and Access Controls vulnerability in SAP Businessobjects Edge 4.0
SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.
network
low complexity
sap CWE-264
5.0