Netweaver Business Warehouse

DATE	CVE	VULNERABILITY TITLE	RISK
2014-11-06	CVE-2014-8663	SQL Injection vulnerability in SAP Netweaver Business Warehouse SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors. network low complexity sap CWE-89	7.5
2014-07-31	CVE-2014-5174	Permissions, Privileges, and Access Controls vulnerability in SAP Netweaver Business Warehouse The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors. network sap CWE-264	3.5