SAP Businessobjects Explorer vulnerabilities

2 CVEs affecting SAP Businessobjects Explorer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-8316, published 2014-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-8316, published 2014-10-16. Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days. XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read arbitrary files via the xmlParameter parameter in an…
CVE-2014-8315, published 2014-10-16. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning…