NVD

Id
35410  
Name
CVE-2014-8315  
Description
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-10-16  
Modified Date
2014-10-21  
Seq
2014-8315  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181537 35410 CVE-2014-8315 20141010 SAP Security Note 1908562 - Port scanning in BusinessObjects Explorer  View
181538 35410 CVE-2014-8315 http://www.csnc.ch/misc/files/advisories/CSNC-2013-016_SAP_BusinessObjects_Explorer_Port-Scanning.txt  View
181539 35410 CVE-2014-8315 20141010 SAP Security Note 1908562 - Port scanning in BusinessObjects Explorer  View
181540 35410 CVE-2014-8315 70382  View
181541 35410 CVE-2014-8315 sap-businessobjects-port-scan-info-disc(96935)  View
181542 35410 CVE-2014-8315 https://service.sap.com/sap/support/notes/1908562  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16061 JVNDB-2014-004936 SAP BusinessObjects Explorer の polestar_xml.jsp におけるポートスキャニング攻撃を実行される脆弱性 SAP BusinessObjects Explorer の polestar_xml.jsp は、接続が確立できるかどうかに応じて、異なるタイミングで応答するため、ポートスキャニング攻撃を実行される脆弱性が存在します。 CVE-2014-8315 75608 CVE-2014-8315 35410 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004936.html 2014-10-10 2014-10-23 View