Vulnerability Details CVE-2014-1960
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/56942
- https://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91093
- https://service.sap.com/sap/support/notes/1828885
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/56942
- https://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91093
- https://service.sap.com/sap/support/notes/1828885
Products affected by CVE-2014-1960
-
cpe:2.3:a:sap:netweaver:-
-
cpe:2.3:a:sap:netweaver_solution_manager:7.0
-
cpe:2.3:a:sap:netweaver_solution_manager:7.1