Lucene search
HistoryApr 30, 2014 - 2:22 p.m.
CVE-2014-3133
sap
netweaver
java
application server
remote attackers
webdynpro
cve-2014-3133
7.4 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
71.9%
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:netweaver_java_application_server | sap netweaver java application server | eq | - |
7.4 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
71.9%
Related for CVE-2014-3133