NVD

Id
36095  
Name
CVE-2014-9387  
Description
SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-12-17  
Modified Date
2016-08-26  
Seq
2014-9387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184512 36095 CVE-2014-9387 20141216 [Onapsis Security Advisory 2014-034] SAP Business Objects Search Token Privilege Escalation via CORBA  View
184513 36095 CVE-2014-9387 http://www.onapsis.com/research/security-advisories/sap-business-objects-search-token-privilege-escalation-via-corba  View
184514 36095 CVE-2014-9387 20141216 [Onapsis Security Advisory 2014-034] SAP Business Objects Search Token Privilege Escalation via CORBA  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18400 JVNDB-2014-007275 SAP BussinessObjects Edge における SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN トークンを取得される脆弱性 SAP BussinessObjects Edge には、SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN トークンを取得され、権限を取得される脆弱性が存在します。 CVE-2014-9387 76680 CVE-2014-9387 36095 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007275.html 2014-09-10 2014-12-19 View