CVE-2014-8310

Published: Oct 16, 2014Modified: May 6, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server shutdown) via crafted OSCAFactory::Session ORB message.

Affected (1)

Products: Sap: Businessobjects

Sap

1 product

Businessobjects

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sap Businessobjects	Version 4.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://packetstormsecurity.com/files/128600/SAP-Business-Objects-Denial-Of-Service-Via-CORBA.html

Source: cve@mitre.org

http://scn.sap.com/docs/DOC-8218

Source: cve@mitre.org

Vendor Advisory

http://seclists.org/fulldisclosure/2014/Oct/40

Source: cve@mitre.org

http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-030

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/533646/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/70308

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/96875

Source: cve@mitre.org

https://service.sap.com/sap/support/notes/2001106

Source: cve@mitre.org

Vendor Advisory

http://packetstormsecurity.com/files/128600/SAP-Business-Objects-Denial-Of-Service-Via-CORBA.html