Lucene search

K
cve[email protected]CVE-2014-2749
HistoryApr 10, 2014 - 8:55 p.m.

CVE-2014-2749

2014-04-1020:55:00
CWE-200
web.nvd.nist.gov
19
sap hana
security vulnerability
remote attack
cve-2014-2749
nvd

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.5%

The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.

CPENameOperatorVersion
sap:hanasap hanaeq-

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.5%

Related for CVE-2014-2749