{"id": "CVE-2015-8840", "bulletinFamily": "NVD", "title": "CVE-2015-8840", "description": "The XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive information, gain privileges, or possibly have unspecified other impact via requests to (1) webcontent/cas/cas_enter.jsp, (2) webcontent/cas/cas_validate.jsp, or (3) webcontent/aas/aas_store.jsp, aka SAP Security Note 1945215.", "published": "2016-04-08T00:59:00", "modified": "2018-12-10T19:29:00", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8840", "reporter": "cve@mitre.org", "references": ["https://erpscan.io/advisories/erpscan-15-017-sap-netweaver-j2ee-das-service-unauthorized-access/", "http://scn.sap.com/community/security/blog/2015/07/15/sap-security-notes-july-2015"], "cvelist": ["CVE-2015-8840"], "type": "cve", "lastseen": "2019-05-29T18:14:45", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "69beaf38c5d3891f69d7f1941c80ac19"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "70b827165a718f9c79e3b73e7d3b0ca0"}, {"key": "cpe23", "hash": "33f7140cb51ff76d0494b033e19168b6"}, {"key": "cvelist", "hash": "5d2894659e9afdf79d79b9b81ae7963a"}, {"key": "cvss", "hash": "0187fd86f792b6c1e0077d0f69d0ed79"}, {"key": "cvss2", "hash": "2fc5651210e1e500933b6f7cf9917ca4"}, {"key": "cvss3", "hash": "b846a5ca76e2d6c68319bd896af9334a"}, {"key": "cwe", "hash": "fa12e087f68642fcaefafba0d4583885"}, {"key": "description", "hash": "eee55967d6200c5e74f6f1737e32d3e3"}, {"key": "href", "hash": "8eaa395f8fccb23ccd4ab42ea500f324"}, {"key": "modified", "hash": "b683953e5616222d20fb5ba9c57c46ef"}, {"key": "published", "hash": "73344bb987c8e298b3df9ac135a51bc2"}, {"key": "references", "hash": "25eb917e74821077b3cf31f0e4d8ad24"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "e3b3c5072d008241698d8f078797e016"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "4910acaf6dd0aa2c04f192170290b6ccff82cc7993c9d189c9a9bf27bbee153e", "viewCount": 0, "enchantments": {"score": {"value": 6.7, "vector": "NONE", "modified": "2019-05-29T18:14:45"}, "dependencies": {"references": [], "modified": "2019-05-29T18:14:45"}, "vulnersScore": 6.7}, "objectVersion": "1.3", "cpe": ["cpe:/a:sap:netweaver:-"], "affectedSoftware": [{"name": "sap netweaver", "operator": "eq", "version": "-"}], "cvss2": {"acInsufInfo": true, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM"}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.4}, "cpe23": ["cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*"], "cwe": ["CWE-264"]}

{}