CVE-2015-7730

CVE-2015-7730 affects SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3. A crafted GIOP packet can trigger an out-of-bounds read and listener crash, enabling remote denial of service. The entry documents this as SAP Security Note 2001108. Exploita...

CVE-2014-8309

CVE-2014-8309 affects SAP BusinessObjects 4.0 and BOXI R2/3.1. The issue stems from error messages shown after failed logon attempts, which vary in delay based on whether the user exists, enabling remote attackers to enumerate valid usernames via SecEnterprise authentication requests to the Sessi...