EUVD-2015-2185

Malware in sbrugna...

EUVD-2014-9209

Malware in sbrugna...

EUVD-2015-2187

Malware in sbrugna...

EUVD-2014-8152

Malware in sbrugna...

EUVD-2015-2186

Malware in sbrugna...

CVE-2014-9320

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SIPLATFORMSEARCHSERVERLOGONTOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905...

CVE-2015-2074

The File Repository Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681...

Design/Logic Flaw

The File RepositoRy Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682...

PT-2021-8387

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.0 Description The issue allows remote attackers to read arbitrary files via a full pathname. This is related to the File Repository Server FRS CORBA listener. Recommendations For SAP BusinessObjects Edge...

PT-2021-8388

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.0 Description The issue allows remote attackers to write to arbitrary files via a full pathname. This is related to the File Repository Server FRS CORBA listener. Recommendations For SAP BusinessObjects Edge...

CVE-2014-9320: Improper Authentication

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SIPLATFORMSEARCHSERVERLOGONTOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905...

CVE-2015-2073: Improper Limitation of a Pathname to a Restricted Directory

The File RepositoRy Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682...

PT-2021-8379

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.1 Description The issue allows remote attackers to obtain the SI PLATFORM SEARCH SERVER LOGON TOKEN token, which can lead to gaining SYSTEM privileges. This is achieved through vectors involving CORBA calls...

CVE-2015-2074: Improper Limitation of a Pathname to a Restricted Directory

The File Repository Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681...

CVE-2015-7730: Improper Restriction of Operations within the Bounds of a Memory Buffer

SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI BOXI 3.1 R3 allow remote attackers to cause a denial of service out-of-bounds read and listener crash via a crafted GIOP packet, aka SAP Security Note 2001108...

CVE-2015-2076

The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395...

CVE-2015-2075

SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396...

CVE-2015-2076

The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395...

CVE-2015-2076

The CVE-2015-2076 vulnerability affects SAP BusinessObjects Edge 4.0, where an unauthenticated remote attacker could read auditing information via the Auditing service. The Onapsis advisory and SAP notes identify an unauthorized access risk exposing audit events (e.g., report names, universe quer...

CVE-2015-2075

SAP BusinessObjects Edge 4.0 is vulnerable to an unauthenticated remote attack that can delete audit events from the auditee queue via the clearData CORBA operation. The root cause is improper authorization (CWE-285) in the CORBA interface, allowing an attacker to instruct the remote auditee to c...