CVE

Id
75617  
CVE No.
CVE-2014-8316  
Status
Candidate  
Description
XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request.  
Phase
Assigned (20141016)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
700284 75617 CVE-2014-8316 BUGTRAQ:20141010 SAP Security Note 1908531 - XXE in BusinessObjects Explorer  View
700285 75617 CVE-2014-8316 URL:http://www.securityfocus.com/archive/1/archive/1/533673/100/0/threaded  View
700286 75617 CVE-2014-8316 FULLDISC:20141010 SAP Security Note 1908531 - XXE in BusinessObjects Explorer  View
700287 75617 CVE-2014-8316 URL:http://seclists.org/fulldisclosure/2014/Oct/50  View
700288 75617 CVE-2014-8316 MISC:http://packetstormsecurity.com/files/128633/SAP-BusinessObjects-Explorer-14.0.5-XXE-Injection.html  View
700289 75617 CVE-2014-8316 MISC:http://www.csnc.ch/misc/files/advisories/CSNC-2013-018_SAP_BusinessObjects_Explorer_XXE.txt  View
700290 75617 CVE-2014-8316 CONFIRM:http://scn.sap.com/docs/DOC-55451  View
700291 75617 CVE-2014-8316 CONFIRM:https://service.sap.com/sap/support/notes/1908531  View
700292 75617 CVE-2014-8316 BID:70384  View
700293 75617 CVE-2014-8316 URL:http://www.securityfocus.com/bid/70384  View
700294 75617 CVE-2014-8316 XF:sap-businessobjects-xml-info-disc(96933)  View

Related JVN