CVE-2010-3980

2022-10-0316:20:57

mitre

www.cve.org

cve-2010-3980

dswsbobje

remote authenticated users

denial of service

generatecuids soapaction

biplatform uri

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.