CVE-2014-9387

Published: Dec 17, 2014Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905.

Affected (1)

Products: Sap: Businessobjects

Sap

1 product

Businessobjects

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sap Businessobjects	Version 4.1

Related CWEs

CWE-264

References (6)

http://seclists.org/fulldisclosure/2014/Dec/60

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.onapsis.com/research/security-advisories/sap-business-objects-search-token-privilege-escalation-via-corba

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/534249/100/0/threaded

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Dec/60

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.onapsis.com/research/security-advisories/sap-business-objects-search-token-privilege-escalation-via-corba

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/archive/1/534249/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.