Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5p5j-jvxx-4r3v

Опубликовано: 10 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.

EPSS

Процентиль: 17%
0.00053
Низкий

3.7 Low

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 3.7
nvd
8 месяцев назад

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.

CVSS3: 3.7
fstec
8 месяцев назад

Уязвимость платформы бизнес-аналитики SAP Business Objects Business Intelligence Platform, связанная с недостаточной проверкой запросов на стороне сервера, позволяющая нарушителю осуществить SSRF-атаку

EPSS

Процентиль: 17%
0.00053
Низкий

3.7 Low

CVSS3

Дефекты

CWE-918