Search vulnerabilities

Results 6

Export CSV
CVE-2015-2075

SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Sap
CVE-2015-2076

The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Sap
CVE-2015-7730

SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service (out-of-bounds read and listener crash) via a crafted GIOP packet, aka SAP Security Note 2001108.

CVSS 2.0 · 10.0 Critical EPSS 3.6% KEV · Not listed
Vendors
Sap
CVE-2015-2074

The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Sap
CVE-2015-2073

The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Sap
CVE-2014-9320

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905.

CVSS 3.1 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Sap