CVE-2014-8311 SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an InfoStore query to a CORBA listener.

LowCVSS 3.5 EPSS 1.8%

Published: 2014-10-16 22:00
Updated: 2026-06-17 03:16
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an InfoStore query to a CORBA listener.

Affected products

Product	Affected versions	Fixed in
sap businessobjects	= 4.0	No fix listed

References

packetstormsecurity.com
20141008 [Onapsis Security Advisory 2014-031] SAP Business Objects Information Disclosure via CORBA mailing-list
www.onapsis.com
20141008 [Onapsis Security Advisory 2014-031] SAP Business Objects Information Disclosure via CORBA mailing-list
sap-businessobjects-corba-info-disc(96876) vdb-entry
service.sap.com vendor-advisory

CVSS v2.0

3.5 Low

AV:N/AC:M/Au:S/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: Single
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.77% (percentile 78.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.