Vulnerability Details CVE-2015-2076
The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/130523/SAP-Business-Objects-Unauthorized-Audit-Information-Access.html
- http://seclists.org/fulldisclosure/2015/Feb/94
- http://www.securityfocus.com/archive/1/534750/100/0/threaded
- http://www.securityfocus.com/bid/72775
- http://packetstormsecurity.com/files/130523/SAP-Business-Objects-Unauthorized-Audit-Information-Access.html
- http://seclists.org/fulldisclosure/2015/Feb/94
- http://www.securityfocus.com/archive/1/534750/100/0/threaded
- http://www.securityfocus.com/bid/72775
Products affected by CVE-2015-2076
-
cpe:2.3:a:sap:businessobjects_edge:4.0