CVE-2014-8315
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing...
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
Exploit likelihood
What each source reports
NVD Score used
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
CVE-2014-8315- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
CVE-2014-8315- Updated
- 2026-11-02
EUVDEUVD-2014-8156 No score
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
EUVD-2014-8156- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5qp3-hxwx-86vp No score
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing...
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
GHSA-5qp3-hxwx-86vp- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-8315 is a medium vulnerability (CVSS 5.0) in Sap Businessobjects Explorer, published October 16, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.51%, the 74th percentile. No source names a fixed version.
References
service.sap.com/sap/support/notes/1908562
seclists.org/fulldisclosure/2014/Oct/48
csnc.ch/misc/files/advisories/CSNC-2013-016_SAP_BusinessObjects_Explorer_Port-Scanning.txt
securityfocus.com/bid/70382
exchange.xforce.ibmcloud.com/vulnerabilities/96935
nvd.nist.gov/vuln/detail/CVE-2014-8315
github.com/advisories/GHSA-5qp3-hxwx-86vp