CVE-2010-3980: Medium severity sap businessobjects business intelligence vulnerability
Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3980?
CVE-2010-3980 is classified as a medium severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2010-3980?
To mitigate CVE-2010-3980, limit the number of CUIDs that can be requested in the GenerateCuids SOAPAction.
Who is affected by CVE-2010-3980?
CVE-2010-3980 affects remote authenticated users of SAP BusinessObjects Enterprise XI 3.2.
What type of attack does CVE-2010-3980 facilitate?
CVE-2010-3980 can be exploited to perform a denial of service attack by overloading the system with large numCuids requests.
What is the impact of CVE-2010-3980 on SAP BusinessObjects?
The impact of CVE-2010-3980 on SAP BusinessObjects is the potential disruption of service due to excessive resource consumption.