Vulnerabilities > SAP > Businessobjects Explorer > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2014-10-16 | CVE-2014-8316 | Unspecified vulnerability in SAP Businessobjects Explorer 14.0.5 XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request. | 5.0 |
2014-10-16 | CVE-2014-8315 | Information Exposure vulnerability in SAP Businessobjects Explorer 14.0.5 polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter. | 5.0 |