Vulnerability Details CVE-2014-9595
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Spool System, aka SAP Note 2061271.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.3%
CVSS Severity
CVSS v2 Score 6.5
References
- http://secunia.com/advisories/62150
- https://erpscan.io/advisories/erpscan-14-024-sap-kernel-rce-dos/
- https://erpscan.io/press-center/blog/sap-critical-patch-update-december-2014/
- http://secunia.com/advisories/62150
- https://erpscan.io/advisories/erpscan-14-024-sap-kernel-rce-dos/
- https://erpscan.io/press-center/blog/sap-critical-patch-update-december-2014/
Products affected by CVE-2014-9595
-
cpe:2.3:a:sap:sap_kernel:7.00
-
cpe:2.3:a:sap:sap_kernel:7.40