SAP NetWeaver Business Warehouse vulnerabilities

2 CVEs affecting SAP NetWeaver Business Warehouse, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-8663, published 2014-11-06.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-5174, published 2014-07-31. Low severity, CVSS 3.5. EPSS: 1.9% chance of exploitation in the next 30 days. The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive…
• CVE-2014-8663, published 2014-11-06. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors.