Filtered by vendor Sap Subscriptions
Filtered by product Businessobjects Explorer Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-8316 1 Sap 1 Businessobjects Explorer 2024-11-21 N/A
XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an explorationSpaceUpdate request.
CVE-2014-8315 1 Sap 1 Businessobjects Explorer 2024-11-21 N/A
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.