VULNERABILITY INTELLIGENCE

CVE-2014-3133

CVSS score5 MEDIUM
EPSS probability2.09%
CISA KEVNot currently listed
Published2014-04-30
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection.

Primary references