CVE-2014-8315
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing...
CVE-2014-8315 is a medium vulnerability (CVSS 5.0) in Sap Businessobjects Explorer, published October 16, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.51%, the 74th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.51%EPSS, 74th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
Exploit likelihood
Affected products
What each source reports
NVD Score used
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
CVE-2014-8315- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
CVE-2014-8315- Updated
- 2026-11-02
EUVDEUVD-2014-8156No score
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
EUVD-2014-8156- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5qp3-hxwx-86vpNo score
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing...
polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter.
- Record
GHSA-5qp3-hxwx-86vp- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
service.sap.com/sap/support/notes/1908562
seclists.org/fulldisclosure/2014/Oct/48
csnc.ch/misc/files/advisories/CSNC-2013-016_SAP_BusinessObjects_Explorer_Port-Scanning.txt
securityfocus.com/bid/70382
exchange.xforce.ibmcloud.com/vulnerabilities/96935
nvd.nist.gov/vuln/detail/CVE-2014-8315
github.com/advisories/GHSA-5qp3-hxwx-86vp