CVE-2014-3131
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated...
CVE-2014-3131 is a medium vulnerability (CVSS 4.0) in Sap Profile Maintenance, published April 30, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 66th percentile. No source names a fixed version.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.09%EPSS, 66th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
Exploit likelihood
Affected products
What each source reports
NVD Score used
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
- Record
CVE-2014-3131- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
- Record
CVE-2014-3131- Updated
- 2026-11-02
EUVDEUVD-2014-3151No score
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
- Record
EUVD-2014-3151- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hj6g-2wqx-rw4fNo score
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated...
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
- Record
GHSA-hj6g-2wqx-rw4f- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.