CVE-2014-3132 SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7....

MediumCVSS 4.0 EPSS 1.1%

Published: 2014-04-30 17:00
Updated: 2026-06-17 03:07
Exploit status: No public exploit known

Description

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.

Affected products

Product	Affected versions	Fixed in
sap background processing	All versions	No fix listed

References

scn.sap.com
20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC mailing-list
www.onapsis.com
67107 vdb-entry
service.sap.com

CVSS v2.0

4.0 Medium

AV:N/AC:L/Au:S/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.09% (percentile 66.0)
CWE: CWE-264

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.