Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rv48-743j-57hj

Опубликовано: 13 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.

EPSS

Процентиль: 94%
0.12617
Средний

8.1 High

CVSS3

Дефекты

CWE-112

Связанные уязвимости

CVSS3: 8.1
nvd
почти 4 года назад

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.

EPSS

Процентиль: 94%
0.12617
Средний

8.1 High

CVSS3

Дефекты

CWE-112