CVE-2015-2075 SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap businessobjects edge | = 4.0 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20150225 [Onapsis Security Advisory 2015-004] SAP Business Objects Unauthorized Audit Information Delete via CORBA mailing-list third-party-advisory vdb-entry
- 20150225 [Onapsis Security Advisory 2015-004] SAP Business Objects Unauthorized Audit Information Delete via CORBA mailing-list
- 72778 third-party-advisory vdb-entry