6 matches found
CVE-2014-8316
XML External Entity XXE vulnerability in polestarxml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request...
Xxe
XML External Entity XXE vulnerability in polestarxml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request...
CVE-2014-8316
CVE-2014-8316 is an XML External Entity (XXE) vulnerability in SAP BusinessObjects Explorer 14.0.5 build 882, affecting polestar_xml.jsp. The issue enables remote attackers to read arbitrary files through the xmlParameter parameter in an explorationSpaceUpdate request, implying potential partial ...
CVE-2014-8316
XML External Entity XXE vulnerability in polestarxml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request...
PT-2014-8465
Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Explorer version 14.0.5 build 882 Description The issue allows remote attackers to read arbitrary files. This is achieved via the xmlParameter parameter in an "explorationSpaceUpdate" request. Recommendations For SAP...
CVE-2014-8316: Undefined Security Weakness
XML External Entity XXE vulnerability in polestarxml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request...